(Glue-2408) Standard SAP Authorizations

Users working with SNP Glue™ should have access to relevant transaction codes and authorizations required for the SNP Glue™ functionality.

The following SAP authorization objects are required for the SNP Glue™ function. See below for a description of how to set up the individual authorization objects.

• S_TCODE: Authorization for transaction codes.
• S_APPL_LOG: Authorization for displaying logs.
• S_RFC_ADM: Authorization for Hadoop storage access (create Glue table, extraction, etc.).
• S_GUI: Authorization for GUI activities.
• S_BTCH_JOB: Authorization for background job operations and scheduling (extraction).
• S_BTCH_ADM: Authorization for background job operations and scheduling (extraction).
• S_DATASET: Authorization for temporary storage (Extractor rules, Glue TMS).
• S_SYS_RWBO: Authorization for WBO Proxy Functions - creating and generating a transport (Glue TMS).
• S_TRANSPRT: Authorization for transport (Glue TMS).
• S_DEVELOP: Authorization for inserting the ABAP code into the extraction (e.g. lookups, routines, etc.) and debugging.
• S_RS_COMP: Authorization for BEx query extraction.
• S_RS_ICUBE: Authorization for InfoCube extraction.

Set up of authorization objects

S_TCODE

The main entry point for SNP Glue™ is through the transaction code /DVD/GLUE. Other dedicated transaction codes may access parts of the functionality. Even when entering SNP Glue™ through the main transaction /DVD/GLUE, the user should have access to these transaction codes through the authorization object S_TCODE.

SNP Glue™ specific transaction codes:

• /DVD/GL11: Glue Data Dictionary.
• /DVD/GL16: Glue Data Browser.
• /DVD/GL14: Glue Dictionary Utility.
• /DVD/GL38: Glue Script Editor.
• /DVD/GL80: Glue Object Navigator.
• /DVD/GLWB: Glue Extractor Workbench.
• /DVD/GLIP: Glue InfoProvider Management. 
• /DVD/GLTR: Glue Transport Management.
• /DVD/GL_DBT: Glue Trigger Management.
• /DVD/GLS: Glue Scheduler.
• /DVD/GL_BPL_CREATE_BO2: Business Objects.

Users should also have these additional authorizations:

• SM50: Work process overview - not required on production.
• SM04: Work process details (needed for detail display in the transaction SM50) - not required on production.
• SE16: Data Browser - not required on production.
• SE38: Program execution - not required on production.
• SM36/SM37: Background jobs.
• SE80: Object Navigator.

S_APPL_LOG

Fill in the fields with the following values:

• ACTVT: 03
• ALG_OBJECT: /DVD/GL
• ALG_SUBOBJ: /DVD/*

S_RFC_ADM (only for Hadoop storages)

Fill in the fields with the following values:

• ACTVT: 03
• RFCTYPE: <dummy>
• RFCDEST: storage RFC
• ICF_VALUE: <dummy>

S_GUI

Fill in the fields with the following values:

• ACTVT: 02, 61

S_BTCH_JOB

Fill in the fields with the following values:

• JOBACTION: RELE, SHOW
• JOBGROUP: *

S_BTCH_ADM

Fill in the field with the following value:

• BTCADMIN: Y

S_DEVELOP

Fill in the fields with the following values:

• DEVCLASSL ZXXX (package for transporting Glue objects, e.g.: ZGLUE_OBJ).
• OBJTYPE: FUNC, PROG
• OBJNAME: Z*, Y*
• P_GROUP: *
• ACTVT: *

S_RS_COMP

Fill in the fields with the following values:

• ACTVT: 16 (execute)
• RSINFOAREA: *
• RSINFOCUBE: *
• RSZCOMPID: *
• RSZCOMPTP: *

S_RS_ICUBE

Fill in the fields with the following values:

• ACTVT: 03 (display)
• RSICUBEOBJ: DEFINITION
• RSINFOAREA: *
• RSINFOCUBE: *

Development-only objects:

S_DATASET

Fill in the fields with the following values:

• PROGRAM: SAPLLOCAL_EDT1, SAPLSTRF
• ACTVT: *
• FILENAME: *

S_SYS_RWBO

Fill in the fields with the following values:

• DOMAIN: *
• DESTSYS: *
• TTYPE: DTRA, TASK
• ACTVT: 01

S_TRANSPRT

Fill in the fields with the following values:

• TTYPE: DTRA, TASK
• ACTVT: *

Required authorization object matrix: