(Glue-2311) Standard SAP Authorizations

Users working with SNP Glue™ should have access to relevant transaction codes and authorizations required for the SNP Glue™ functionality.

The following SAP authorization objects are required for the SNP Glue™ functionality. See below for a description of how to set up the individual authorization objects.

  • S_TCODE: Authorization for transaction codes.
  • S_APPL_LOG: Authorization for displaying logs.
  • S_RFC_ADM: Authorization for Hadoop storage access (create Glue table, extraction, etc.).
  • S_GUI: Authorization for GUI activities.
  • S_BTCH_JOB: Authorization for background job operations and scheduling (extraction).
  • S_DATASET: Authorization for temporary storage (Extractor rules, Glue TMS).
  • S_SYS_RWBO: Authorization for WBO Proxy Functions - creation and generation of a transport (Glue TMS).
  • S_TRANSPRT: Authorization for transport (Glue TMS).
  • S_DEVELOP: Authorization for inserting the ABAP code into the extraction (e.g. lookups, routines, etc.) and debugging.
  • S_RS_COMP: Authorization for BEx query extraction.
  • S_RS_ICUBE: Authorization for InfoCube extraction.

Set up of authorization objects

S_TCODE

The main entry point for SNP Glue™ is through the transaction code /DVD/GLUE. Other dedicated transaction codes may access parts of the functionality. Even when entering SNP Glue™ through the main transaction /DVD/GLUE, the user should have access to these transaction codes through the authorization object S_TCODE.

SNP Glue™ specific transaction codes:

    • /DVD/GL11: Glue Data Dictionary.
    • /DVD/GL16: Glue Data Browser.
    • /DVD/GL14: Glue Dictionary Utility.
    • /DVD/GL38: Glue Script Editor.
    • /DVD/GL80: Glue Object Navigator.
    • /DVD/GLWB: Glue Extractor Workbench.
    • /DVD/GLIP: Glue InfoProvider Management. 
    • /DVD/GLTR: Glue Transport Management.
    • /DVD/GL_DBT: Glue Trigger Management.
    • /DVD/GLS: Glue Scheduler.
    • /DVD/GL_BPL_CREATE_BO2: Business Objects.

Users should also have these additional authorizations:

    • SM50: Work process overview - not required on production.
    • SM04: Work process details (required for detail display in the transaction SM50) - not required on production.
    • SE16: Data Browser - not required on production.
    • SE38: Program execution - not required on production.
    • SM36/SM37: Background jobs.
    • SE80: Object Navigator.

S_APPL_LOG

Fill in the fields with the following values:

  • ACTVT: 03
  • ALG_OBJECT: /DVD/GL
  • ALG_SUBOBJ: /DVD/*

S_RFC_ADM (only for Hadoop storages)

Fill in the fields with the following values:

  • ACTVT: 03
  • RFCTYPE: <dummy>
  • RFCDEST: storage RFC
  • ICF_VALUE: <dummy>

S_GUI

Fill in the fields with the following values:

  • ACTVT: 02, 61

S_BTCH_JOB

Fill in the fields with the following values:

  • JOBACTION: RELE, SHOW
  • JOBGROUP: *

S_DEVELOP

Fill in the fields with the following values:

  • DEVCLASSL ZXXX (package used for transporting Glue objects, e.g.: ZGLUE_OBJ).
  • OBJTYPE: *
  • OBJNAME: Z*, Y*
  • P_GROUP: *
  • ACTVT: *

S_RS_COMP

Fill in the fields with the following values:

  • ACTVT: 16 (execute)
  • RSINFOAREA: *
  • RSINFOCUBE: *
  • RSZCOMPID: *
  • RSZCOMPTP: *

S_RS_ICUBE

Fill in the fields with the following values:

  • ACTVT: 03 (display)
  • RSICUBEOBJ: DEFINITION
  • RSINFOAREA: *
  • RSINFOCUBE: *

Development-only objects:

S_DATASET

Fill in the fields with the following values:

  • PROGRAM: SAPLLOCAL_EDT1, SAPLSTRF
  • ACTVT: *
  • FILENAME: *

S_SYS_RWBO

Fill in the fields with the following values:

  • DOMAIN: *
  • DESTSYS: *
  • TTYPE: DTRA, TASK
  • ACTVT: 01

S_TRANSPRT

Fill in the fields with the following values:

  • TTYPE: DTRA, TASK
  • ACTVT: *

Required authorization object matrix:

t-codeDevelopmentProduction
/dvd/gl16S_GUI, S_APP_LOGS_GUI, S_APP_LOG
/dvd/gl11S_GUI, S_APP_LOG, S_DEVELOPS_GUI, S_APP_LOG, S_DEVELOP
/dvd/gl14S_APP_LOGS_APP_LOG
/dvd/gl38S_APP_LOGS_APP_LOG
/dvd/gl80S_GUI, S_APP_LOG, S_DEVELOP,S_BTCH_JOB,S_BTCH_ADM ,S_RS_COMP,
S_RS_ICUBE
S_GUI, S_APP_LOG, S_DEVELOP,S_BTCH_JOB,S_BTCH_ADM ,S_RS_COMP,
S_RS_ICUBE
/dvd/glwbS_GUI, S_APP_LOG, S_DEVELOP,S_BTCH_JOB,S_BTCH_ADM ,S_RS_COMP,
S_RS_ICUBE
S_GUI, S_APP_LOG, S_DEVELOP,S_BTCH_JOB,S_BTCH_ADM ,S_RS_COMP,
S_RS_ICUBE
/dvd/glipS_APP_LOGS_APP_LOG
/dvd/gl_trS_GUI, S_APP_LOG, S_DEVELOP, S_DATASET, S_SYS_RWBO, S_TRANSPRTS_GUI, S_APP_LOG, S_DEVELOP
/dvd/gl_dbtS_APP_LOGS_APP_LOG