SAP authorizations

The following table describes the authorizations that are necessary for SAP users defined in a connection profile.

Authorization Object

Authorization

Values

S_BTCH_JOB

Object class: BC_A (Basis: Administration)
  • JOBACTION
  • JOBGROUP
  • *
  • *

S_BTCH_ADM

Object class: BC_A (Basis: Administration)

BTCADMIN

*

S_BTCH_NAM

Object class: BC_A (Basis: Administration)

BTCUNAME

NOTE: For an explanation on restricting this authorization see the User parameter in Print parameters

*

S_RFC

Object class: AAAB (Cross-application)
  • ACTVT
  • RFC_NAME
  • RFC_TYPE
  • *
  • *
  • *

S_XMI_PROD

Object class: BC_A (Basis: Administration)
  • EXTCOMPANY
  • EXTPRODUCT
  • INTERFACE
  • BMC Software
  • Control-M
  • XBP

S_RZL_ADM

\Object class: BC_A (Basis: Administration)

 

ACTVT

NOTE: To prevent other SAP users (not the Control-M account user) from releasing Intercepted Jobs manually using SAP transaction SM37, BMC Software recommends removing the 01 value for ACTVT in the S_RZL_ADM Authorization Object.

For further restriction of this authorization, see SAP note 605483 in Known SAP notes.

*

S_LOG_COM

Object class: BC_A (Basis: Administration)
  • COMMAND
  • HOST
  • OPSYSTEM
  • *
  • *
  • *

S_SPO_DEV

Object class: BC_A (Basis: Administration)

SPODEVICE

*

S_USER_GRP

Object class: BC_A (Basis: Administration)
  • ACTVT
  • CLASS
  • *
  • *

S_RS_ADMWB

Object class: RS (Business Information Warehouse)
  • ACTVT
  • RSADMWBOBJ
  • 03, 16, 23, 66
  • *

S_RS_ISOUR

Object class: RS (Business Information Warehouse)
  • ACTVT
  • RSAPPLNM
  • RSISOURCE
  • RSTSRCOBJ
  • 03, 23, 49
  • *
  • *
  • *

S_RS_ISRCM

Object class: RS (Business Information Warehouse)
  • ACTVT
  • RSAPPLNM
  • RSTSRCOBJ
  • RSOSOURCE
  • 23
  • *
  • *
  • *

S_RS_PC - (Data

Warehousing Workbench - Process chains) Object class: RS (Business Information Warehouse)
  • RSPCCHAIN
  • RSAPPLNM
  • RSPCPART
  • ACTVT
  • *
  • *
  • *
  • 03, 16, 23

S_RS_DS
  • Activity
  • DataSource
  • Sub object for New DataSource
  • Source System
  • 23,49
  • *
  • *
  • *

NOTE: All BW authorizations under the RS Object Class are required only if you work with Control-M for SAP solution for BW.

S_ARCHIVE

Object class: BC_A (Basis:

Administration)
  • ACTVT
  • APPLIC
  • ARCH_OBJ
  • *
  • *
  • *

S_DATASET
  • ACTVT
  • FILENAME
  • PROGRAM
  • *
  • *
  • *

NOTE: The S_ARCHIVE and S_DATASET authorizations are required only if you use Control-M for SAP solution for Data Archiving

Parent Topic

Control-M for SAP post installation procedures