Authorization Objects for the Administration User Role

The technical name for the administration user role is /DVD/MON_ADMIN.

Authorization object

Description

S_DX_MAIN (DX Workbench: Transaction Code and Activity)

ACTVT (Activity) = 36 (Extended maintenance);

TCD (Transaction code) = <empty>, /DVD/MON, SE38

S_ICF_ADM (Administration for Internet Communication Framework)

ACTVT (Activity) = 07 (Activate or generate);

ICF_HOST (ICF: Name of virtual host) = DEFAULT_HOST;

ICF_NODE (ICF: GUID of ICF service/alias) = *;

ICF_TYPE (ICF: Service/host/alias) = NODE

S_RFC (Authorization Check for RFC Access)

ACTVT (Activity) = 16 (Execute);

RFC_NAME (Name of the RFC object to be protected) = /DVD/*, SRFC, SUNI, SYST, THFB;

RFC_TYPE (Type of the RFC object to be protected) = FUGR (Function group)

S_RFC_ADM (Administration for RFC Destination)

ACTVT (Activity) = 03 (Display);

ICF_VALUE (Internet communication framework values) = *;

RFCDEST (Logical destination (specified in function call)) = *;

RFCTYPE (Type of entry in RFCDES) = All values

S_TCODE (Transaction Code Check at Transaction Start)

TCD (Transaction code) = /DVD/MON, /DVD/MON_BWQ, /DVD/MON_COL, /DVD/MON_COPY_USRVAR, /DVD/MON_CUST, /DVD/MON_INC, /DVD/MON_INIT, /DVD/MON_LOG, /DVD/MON_REPORTING, /DVD/MON_SYS;

TCD (Transaction code) = SCOT, SM04, SM30, SM37, SM50, SM51, SM59, SMDAEMON, SO15, SOST, SU01D, SU53

S_ADMI_FCD (System Authorizations)

S_ADMI_FCD (System administration function) = AUDD, LC01, NADM, PADM, SLIC, SM02, SM21, SQMD, ST0R, UNIX, SP01, SP0R

S_BTCH_ADM (Background Processing: Background Administrator)

BTCADMIN (Background administrator ID) = Y

S_BTCH_JOB (Background Processing: Operations)

JOBACTION (Job operations) = All values;

JOBGROUP (Summary of jobs for a group) = *

S_BTCH_NAM (Background Processing: Background Username)

BTCUNAME (Background username for authorization check) = *

S_CTS_ADMI (Administration Functions in Change and Transport System)

CTS_ADMFCT (Administration tasks for change and transport system) = TABL

S_CTS_SADM (System-Specific Administration (Transport))

CTS_ADMFCT (Administration tasks for change and transport system) = TABL;

DESTSYS (Logical system) = *;

DOMAIN (TMS: Transport domain) = *

S_C_FUNCT (C Calls in ABAP Programs)

ACTVT (Activity) = 16 (Execute)

CFUNCNAME (Name of a callable C routine) = SYSTEM

PROGRAM (program name with search help) = RSHOST14

ACTVT (Activity) = 16 (Execute)

CFUNCNAME (Name of a callable C routine) = SYSTEM

PROGRAM (program name with search help) = /DVD/MON,

/DVD/MON_CL_COL_MEM_CPU_LAN===CP, /DVD/MON_CL_COL_SYS_CMD=======CP, /DVD/MON_CL_COL_SYS_FS========CP, /DVD/MON_WDISP_CL_HANDLER_CMD=CP, /DVD/SAPLMON, /DVD/SAPLMON_COL_RFC, /DVD/SAPLMON_RFC, DVD_JMXSRV

S_DATASET (Authorization for File Access)

ACTVT (Activity) = 33 (Read), A6 (Read with filter);

FILENAME (Physical file name) = *;

PROGRAM (program name with search help) = *

ACTVT (Activity) = 06 (Delete), 34 (Write), A7 (Write with filter);

FILENAME (Physical file name) = *;

PROGRAM (program name with search help) = /DVD/JMX_CL_DEPLOYMENT========CP

S_DBCON (Database Multiconnect)

ACTVT (Activity) = 03 (Display);

DBA_DBHOST (DBA Cockpit: Server name) = *;

DBA_DBSID (DBA Cockpit: Database name) = *;

DBA_DBUSER (Database user) = *;

S_GUI (Authorization for GUI activities)

ACTVT (Activity) = 02 (Change), 60 (Import), 61 (Export), D1 (Copy)

S_LOG_COM (Authorization to Execute Logical Operating System Commands)

COMMAND (Logical command name) = /DVD/JMX_DEP_CMD, /DVD/JMX_WIN_CMD, BRTOOLS, ZDVD_MON_DSK_STATS, ZDVD_MON_FILE_CNT, ZDVD_MON_FLDR_SIZE, ZDVD_MON_MKDIR, ZDVD_MON_MOUNT, ZDVD_MON_RMDIR, ZDVD_MON_WIN_CMD;

HOST (Name of Current Application Server) = *;

OPSYSTEM (Operating System of Application Server) = *

COMMAND (Logical command name) = PING;

HOST (Name of Current Application Server) = *;

OPSYSTEM (Operating System of Application Server) = *

S_RZL_ADM (CCMS: System Administration)

ACTVT (Activity) = 03 (Display), 07 (Activate or generate)

S_SPO_ACT (Spool: Actions)

SPOACTION (Authorization field for spool) = BASE (Visibility), DISP (Display contents)

SPOAUTH (Value for authorization check) = *

S_TABU_CLI (Cross-Client Table Maintenance)

CLIIDMAINT (Indicator for cross-client maintenance) = X (Allowed: Maintenance of cross-client tables)

S_TABU_DIS (Table Maintenance (via Standard Tools Such as SM30))

ACTVT (Activity) = *;

DICBERCLS (Table authorization group) = DVDC

S_TABU_NAM (Table Access via Generic Standard)

ACTVT (Activity) = 02 (Change), 03 (Display);

TABLE (Table name) = /DVD/*

S_TOOLS_EX (Tools Performance Monitor)

AUTH (Authorization name in user master maintenance) = *

S_USER_AGR (Authorizations: Role Check)

ACTVT (Activity) = 01 (Create or generate), 02 (Change), 64 (Generate);

ACT_GROUP (Role name) = /DVD/*

S_USER_AUT (User Master Maintenance: Authorizations)

ACTVT (Activity) = 03 (Display), 08 (Display change documents);

AUTH (Authorization name in user master maintenance) = *;

OBJECT (Authorization object) = *

S_USER_GRP (User Master Maintenance: User Groups)

ACTVT (Activity) = 03 (Display), 08 (Display change documents);

CLASS (User group in user master maintenance) = *

S_USER_PRO (User Master Maintenance: Authorization Profile)

ACTVT (Activity) = 03 (Display), 08 (Display change documents);

PROFILE (Authorization profile in user master maintenance) = *

S_PROGRAM (ABAP: Program Flow Checks)

P_ACTION (User action ABAP/4 program) = BTCSUBMIT (Schedule programs for background processing), SUBMIT (Execute ABAP program), VARIANT (Maintain variants and execute ABAP program);

P_GROUP (Authorization group ABAP/4 program) = *

S_ADDRESS1 (Business Address Services: Address)

ACTVT (Activity) = 03 (Display);

ADGRP (Address group (key) (business address services)) = BC01

S_ALV_LAYO (ALV Standard Layout)

ACTVT (Activity) = 23 (Maintain)

S_APPL_LOG (Applications Log)

ACTVT (Activity) = 03 (Display);

ALG_OBJECT (Application log: Object name (application code)) = /DVD/*;

ALG_SUBOBJ (Application log: Subobject) = /DVD/*

S_BDS_DS (BC-SRV-KPR-BDS: Authorizations for Document Set)

ACTVT (Activity) = 03 (Display);

CLASSNAME (Business document service: Class name) = SAP_ICONS;

CLASSTYPE (Business document service: Class type) = OT (Other objects)

S_OC_DOC (SAPoffice: Authorization for an Activity with Documents)

ACTVT (Activity) = 24 (Archive)

S_OC_ROLE (SAPoffice: Office User Attribute)

OFFADMI (Text field length 15: Authorization check) = ADMINISTRATOR

S_OC_SEND (Authorization Object for Sending)

COM_MODE (Valid communication methods) = All values;

NUMBER (Range of number of recipients allowed per send operation) = 100

S_OC_TCD (SAPoffice: Transaction Code Authorizations)

OFFTCD (Transaction code) = SO15

/DVD/CCAGT (CrystalBridge® Monitoring: Manage Collector Jobs (Create, Start, Stop, Execute Collection))

/DVD/CCACT (Activity) = *;

/DVD/CCPRO (Monitoring profile) = *;

/DVD/CCSID (System ID) = *

/DVD/CCCUS (CrystalBridge® Monitoring: Manage Customizing/Setup (Display, Change))

/DVD/CCACT (Activity) = *

/DVD/CCINC (CrystalBridge® Monitoring: Manage Incident ( View, Create, Change))

/DVD/CCACT (Activity) = *;

/DVD/CCSID (System ID) = *

/DVD/CCKPI (CrystalBridge® Monitoring: Manage KPI)

/DVD/CCACT (Activity) = *;

/DVD/CCKGR (KPI group) = *;

/DVD/CCKPI (KPI name) = *;

/DVD/CCSID (System ID) = *

/DVD/CCMON (CrystalBridge® Monitoring: Execute Central Monitor/Collector)

/DVD/CCACT (Activity) = *

/DVD/CCSAT (CrystalBridge® Monitoring: Satellite System)

/DVD/CCACT (Activity) = 10, 19

/DVD/CCSOL (CrystalBridge® Monitoring: Manage Solution (View, Create, Change))

/DVD/CCACT (Activity) = *;

/DVD/CCSID (System ID) = *

/DVD/CCSYS (CrystalBridge® Monitoring: Manage System (Add, Delete, Import, Export, View))

/DVD/CCACT (Activity) = *;

/DVD/CCSID (System ID) = *

/DVD/JMXAO (Authorization to Execute JMX)

ACTVT (Activity) = 16 (Execute)

S_RS_COMP (Business Explorer – Components)

ACTVT (Activity) = 03 (Display), 16 (Execute);

RSINFOAREA (InfoArea) = *;

RSINFOCUBE (InfoCube) = *;

RSZCOMPID (Name (ID) of a reporting component) = *;

RSZCOMPTP (Type of a reporting component) = All values

S_RS_COMP1 (Business Explorer – Components: Enhancements to the Owner)

ACTVT (Activity) = 03 (Display), 16 (Execute);

RSZCOMPID (Name (ID) of a reporting component) = *;

RSZCOMPTP (Type of a reporting component) = All values;

RSZOWNER (Owner (person responsible) for a reporting component) = *