Q&A - /DVD/APPD_USER role

Q: What is the purpose of this role?

A: Role /DVD/APPD_USER is designed to run ABAP and Insights monitoring activities smoothly. Users without role /DVD/APPD_USER will see many application log errors regarding failed initiation of SQL or ABAP trace. 

Q: Who should be assigned?

A: Role /DVD/APPD_USER should be assigned to users that are to be monitored and to technical users utilized during RFC calls.

Q: Can the role name and structure be changed to be aligned with corporate policy?

A: This role can be aligned according to the company security policy, but it is not recommended. The role modification can affect its functionality and thus lead to an unpredictable ABAP agent and Datavard Insights behavior. In that case, the responsibility is on a person that modified the role.

Q: Why business users need basis administration permissions?

A: Business users have some standard basis permissions by default but embedded (and thus invisible) in their roles. /DVD/APPD_USER adds a minimal necessary set of permissions required to perform tracing on a user level. These permissions were carefully selected to enable ABAP/SQL instrumentation and not compromise security. To discover what permissions are set in /DVD/APPD_USER, please execute transaction code PFCG and you can see details of any role on an SAP system.