(OH-1805) Authorizations
- SNP
- Anonymous
This topic covers the authorizations in OutBoard Housekeeping cockpit that permit/forbid specific Housekeeping activities.
Using transaction PFCG, different OutBoard Housekeeping roles can be created and assigned to the users.
An authorization topic is split into two parts – admin and user roles.
Admin role enables the user to maintain OutBoard Housekeeping central system. It covers Housekeeping GUI activities.
User role covers all the authorizations required by OutBoard Housekeeping tasks to be executed on remote systems.
Warning:
If the central system is maintained with OutBoard Housekeeping (it means, RFC destination is 'NONE'), the user that schedules the task is required to have the appropriate authorizations (see "OutBoard Housekeeping User role").
OutBoard Housekeeping Admin role
OutBoard Housekeeping admin role is provided in a form of a role called /DVD/ERNA_ADMIN. This role enables all Housekeeping activities in GUI. The transport of this role is part of a delivery package.
This role can be copied using the PFCG transaction. The role copy can then be modified to enable/disable specific tasks and later to be assigned to OutBoard Housekeeping users.
SAP Authorizations
These authorizations are mandatory – DO NOT modify!
Object | S_TCODE |
|
|
|
Fields | TCD |
|
|
|
Value | /DVD/ERNA |
|
|
|
Value | PFCG |
|
|
|
Object | S_BTCH_ADM |
|
|
|
Fields | BTCADMIN |
|
|
|
Value | * |
|
|
|
Object | S_BTCH_JOB |
|
|
|
Fields | JOBACTION | JOBGROUP |
|
|
Value | RELE | ' ' |
|
|
Value | DELE | * |
|
|
Object | S_BTCH_NAM |
|
|
|
Fields | BTCUNAME |
|
|
|
Value | * |
|
|
|
Object | S_CTS_ADMI |
|
|
|
Fields | CTS_ADMFCT |
|
|
|
Value | TABL |
|
|
|
Object | S_CTS_SADM |
|
|
|
Fields | CTS_ADMFCT | DESTSYS | DOMAIN |
|
Value | TABL | * | * |
|
Object | S_GUI |
|
|
|
Fields | ACTVT |
|
|
|
Value | 02, 61 |
|
|
|
Object | S_USER_AGR |
|
|
|
Fields | ACTVT | ACT_GROUP |
|
|
Value | All activities | * |
|
|
Object | S_USER_AUT |
|
|
|
Fields | ACTVT | ACT_GROUP | OBJECT |
|
Value | All activities | * | * |
|
Object | S_USER_GRP |
|
|
|
Fields | ACTVT | CLASS |
|
|
Value | All activities | * |
|
|
Object | S_USER_PRO |
|
|
|
Fields | ACTVT | RPOFILE |
|
|
Value | All activities | * |
|
|
Object | S_DOKU_AUT |
|
|
|
Fields | DOKU_ACT | DOKU_DEVCL | DOKU_MODE |
|
Value | All values | * | All values |
|
Object | S_TRANSLAT |
|
|
|
Fields | ACTVT | TLANGUAGE | TRANOBJ |
|
Value | 02 | * | All values |
|
Object | S_APPL_LOG |
|
|
|
Fields | ALG_OBJECT | ALG_SUBOBJ | ACTVT | Description |
Value | /DVD/FS /DVD/FS_LOG | * | 03 | Display |
Object | /DVD/ERNA |
|
|
|
Fields | /DVD/FSACT | /DVD/FSGRP | /DVD/FSTSK | Description |
Value | * | * | * |
|
OutBoard Housekeeping cockpit authorizations
These authorizations can be added/removed as required.
Object/DVD/ERNA
Task Group | Task Name | Activity | Description |
SYS | ANL_EXEC | 02 | Execute analysis |
SYS | ANL_EXEC | 03 | Display analysis |
SYS | COCKPIT | 03 | Enter the cockpit |
SYS | LICENSE | 02 | Maintain license key |
SYS | LANDSCAPE | 03 | Show landscape editor |
SYS | LANDSCAPE | 02 | Switch landscape editor to edit mode |
SYS | PROFILE | 03 | Show Profile editor |
SYS | PROFILE | 02 | Switch Profile editor to edit mode |
SYS | RECYCLEBIN | 03 | Show global RecycleBin |
SYS | MONITOR | 03 | Show global monitor |
SYS | CALENDAR | 03 | Show calendar |
SYS | CALENDAR | 81 | Edit/delete scheduled taskStart/stop central scheduler (in global settings) |
SYS | SETTINGS | 03 | Show global settings |
SYS | SETTINGS | 02 | Switch global settings to edit mode |
SYS | STATREPORT | 03 | Display statistics history report |
SYS | SYSLOG | 03 | Show system logs |
SYS | TASKINFO | 03 | Show task info |
SYS | SHOWREPORT | 03 | Show system report |
SYS | TABLEBROWS | 03 | Show table browser |
(group) | (task) | 16 | Undo/delete run or table in RecycleBin |
(group) | (task) | 16 | Set status to OK in global monitor for selected task |
(group) | (task) | 03 | Show log for selected taskShow monitor for selected taskShow log in global monitor for selected task |
OutBoard Housekeeping system view authorizations
These authorizations can be added/removed as required.
Object/DVD/ERNA
Task Group | Task Name | Activity | Description |
(group) | (task) | 16 | Execute selected task (from rightclick menu) |
(group) | (task) | 02 | Create/update/delete settings for selected task |
(group) | (task) | 03 | Show logs for selected task |
(group) | (task) | 03 | Show RecycleBin for selected task |
(group) | (task) | 16 | Undo/delete run or table for selected task |
(group) | (task) | 03 | Show monitor for selected task |
(group) | (task) | 03 | Show log from monitor for selected task |
(group) | (task) | 16 | Set status to OK from monitor for selected task |
(group)valid values are checked against /DVD/FS_TASKGRP table
(task)valid values are checked against /DVD/FS_TASK table
OutBoard Housekeeping activity view authorizations
These authorizations can be added/removed as required.
Object/DVD/ERNA
Task Group | Task Name | Activity | Description |
(group) | (task) | 02 | Set inheritance for selected task |
(group) | (task) | 16 | Execute task for selected landscape area |
(group) | (task) | 02 | Create/update/delete settings for selected task and landscape area |
(group) | (task) | 81 | Schedule selected task for landscape area |
(group) | (task) | 03 | Show logs for selected task and landscape area |
(group)valid values are checked against /DVD/FS_TASKGRP table
(task)valid values are checked against /DVD/FS_TASK table
OutBoard Housekeeping User role
Due to the complexity for the set of authorizations, this is provided in a form of a role called /DVD/ERNA_USER. The transport of this role is part of a delivery package.
It can be assigned to the users used for RFC connections. It is highly recommended not to modify it.,