(Glue-2411) Standard SAP Authorizations

Users working with SNP Glue should have access to relevant transaction codes and authorizations required for the SNP Glue function.

The following SAP authorization objects are required for the SNP Glue function. See below for a description of how to set up the individual authorization objects.

• S_TCODE: Authorization for transaction codes.
• S_APPL_LOG: Authorization for displaying logs.
• S_RFC_ADM: Authorization for Hadoop storage access (create Glue table, extraction, etc.).
• S_GUI: Authorization for GUI activities.
• S_BTCH_JOB: Authorization for background job operations and scheduling (extraction).
• S_BTCH_ADM: Authorization for background job operations and scheduling (extraction).
• S_DATASET: Authorization for temporary storage (Extractor rules, Glue TMS).
• S_SYS_RWBO: Authorization for WBO Proxy Functions - creating and generating a transport (Glue TMS).
• S_TRANSPRT: Authorization for transport (Glue TMS).
• S_DEVELOP: Authorization for inserting the ABAP code into the extraction (e.g. lookups, routines, etc.) and debugging.
• S_RS_COMP: Authorization for BEx query extraction.
• S_RS_ICUBE: Authorization for InfoCube extraction.

Set up of authorization objects

S_TCODE

The main entry point for SNP Glue is through the transaction code /DVD/GLUE. Other dedicated transaction codes may access parts of the functionality. Even when entering SNP Glue through the main transaction /DVD/GLUE, the user should have access to these transaction codes through the authorization object S_TCODE.

SNP Glue specific transaction codes:

• /DVD/GL11: Glue Data Dictionary.
• /DVD/GL16: Glue Data Browser.
• /DVD/GL14: Glue Dictionary Utility.
• /DVD/GL38: Glue Script Editor.
• /DVD/GL80: Glue Object Navigator.
• /DVD/GLWB: Glue Extractor Workbench.
• /DVD/GLIP: Glue InfoProvider Management. 
• /DVD/GLTR: Glue Transport Management.
• /DVD/GL_DBT: Glue Trigger Management.
• /DVD/GLS: Glue Scheduler.
• /DVD/GL_BPL_CREATE_BO2: Business Objects.

Users should also have these additional authorizations:

• SM50: Work process overview - not required on production.
• SM04: Work process details (needed for detail display in the transaction SM50) - not required on production.
• SE16: Data Browser - not required on production.
• SE38: Program execution - not required on production.
• SM36/SM37: Background jobs.
• SE80: Object Navigator.

S_APPL_LOG

Fill in the fields with the following values:

• ACTVT: 03
• ALG_OBJECT: /DVD/GL
• ALG_SUBOBJ: /DVD/*

S_RFC_ADM (only for Hadoop storages)

Fill in the fields with the following values:

• ACTVT: 03
• RFCTYPE: <dummy>
• RFCDEST: storage RFC
• ICF_VALUE: <dummy>

S_GUI

Fill in the fields with the following values:

• ACTVT: 02, 61

S_BTCH_JOB

Fill in the fields with the following values:

• JOBACTION: RELE, SHOW
• JOBGROUP: *

S_BTCH_ADM

Fill in the field with the following value:

• BTCADMIN: Y

S_DEVELOP

Fill in the fields with the following values:

• DEVCLASSL ZXXX (package for transporting Glue objects, e.g.: ZGLUE_OBJ).
• OBJTYPE: FUNC, PROG
• OBJNAME: Z*, Y*
• P_GROUP: *
• ACTVT: *

S_RS_COMP

Fill in the fields with the following values:

• ACTVT: 16 (execute)
• RSINFOAREA: *
• RSINFOCUBE: *
• RSZCOMPID: *
• RSZCOMPTP: *

S_RS_ICUBE

Fill in the fields with the following values:

• ACTVT: 03 (display)
• RSICUBEOBJ: DEFINITION
• RSINFOAREA: *
• RSINFOCUBE: *

Development-only objects:

S_DATASET

Fill in the fields with the following values:

• PROGRAM: SAPLLOCAL_EDT1, SAPLSTRF
• ACTVT: *
• FILENAME: *

S_SYS_RWBO

Fill in the fields with the following values:

• DOMAIN: *
• DESTSYS: *
• TTYPE: DTRA, TASK
• ACTVT: 01

S_TRANSPRT

Fill in the fields with the following values:

• TTYPE: DTRA, TASK
• ACTVT: *

Required authorization object matrix: