(Glue-2311) SNP Glue Pre-delivered Role Mapping

SNP Glue transports already include a certain list of pre-delivered roles. When used (AUTH_OBJ_GLUE enabled in Expert Settings section of Glue Settings), these have to be generated in transaction PFCG and subsequently assigned to respective users.

The purpose of these roles is primarily the Segregation of Duties.

Authorization Role

Activity

/DVD/GLUE_USER
/DVD/SM_ADMIN
/DVD/GLUE_ALL
/DVD/GLUE_EDIT
/DVD/GLUE_TRANSPORT
/DVD/GL_READ_DATA
/DVD/GLUE_RUN
/DVD/GLUE_DISPLAY
/DVD/SM_EDIT
/DVD/SM_DISPLAY

Authorization Role

Activity

/DVD/GLUE_USER
/DVD/SM_ADMIN
/DVD/GLUE_ALL
/DVD/GLUE_EDIT
/DVD/GLUE_TRANSPORT
/DVD/GL_READ_DATA
/DVD/GLUE_RUN
/DVD/GLUE_DISPLAY
/DVD/SM_EDIT
/DVD/SM_DISPLAY

Create table in Glue11

CRE_GLUE11

X

 

X

X

 

 

 

 

 

 

Display table in Glue11

DIS_GLUE11

X

 

X

X

 

 

 

X

 

 

Display storage table data in Glue16

DIS_GLUE16

X

 

X

 

 

X

 

 

 

 

Manage table in Glue14

MAN_GLUE14

X

 

X

X

 

 

 

 

 

 

Display Extractor

DIS_EXT

X

 

X

X

 

 

X

X

 

 

Create and manage Extractor

MAN_EXT

X

 

X

X

 

 

 

 

 

 

Run extraction

RUN_EXT

X

 

X

X

 

 

X

 

 

 

Edit BPL

MAN_BPL

X

 

X

X

 

 

 

 

 

 

Transport Glue objects

CRE_TMS

X

 

X

 

X

 

 

 

 

 

Import Glue objects

IMP_TMS

X

 

X

 

X

 

 

 

 

 

Display queue

DIS_QUE

X

 

X

X

 

 

X

X

 

 

Manage queue

MAN_QUE

X

 

X

X

 

 

X

 

 

 

Display Infoprovider

DIS_IP

X

 

X

X

 

 

 

X

 

 

Manage Infoprovider

MAN_IP

X

 

X

X

 

 

 

 

 

 

Read alll clients

ALL_CLIENT

X

 

X

 

 

 

 

 

 

 

Manage glue settings

MAN_SETT

X

 

X

 

 

 

 

 

 

 

Create new storage

CREATE_STORAGE

 

X

X

 

 

 

 

 

X

 

Delete existing storage

DELETE_STORAGE

 

X

X

 

 

 

 

 

X

 

Display existing storage

DISPLAY_STORAGE

 

X

X

 

 

 

 

 

X

X

Edit existing storage

EDIT_STORAGE

 

X

X

 

 

 

 

 

X

 

Switch to Edit mode in /DVD/SM_SETUP

SM_SETUP_EDIT

 

X

X

 

 

 

 

 

 

 

Editing JCO management

EDIT_JCO

 

X

X

 

 

 

 

 

 

 

Roles /DVD/GLUE_USER and /DVD/SM_ADMIN do already contain some of the SAP standard authorizations, which are required to run SNP Glue. These are typically already available to users operating SNP Glue. Their primary usage is on a non-productive system, to speed up the process as much as possible.

The rest of the roles are limited to SNP Glue authorization objects.