Central Monitoring with CCMS 

SAP’s CCMS monitoring infrastructure, part of any SAP NetWeaver installation, lets you centrally monitor any IT environments – from individual systems through networked SAP solutions to complex IT landscapes incorporating several hundred systems. It can be used immediately after installation. You can easily extend the infrastructure to include SAP and non-SAP components.

Defining  CCMS Communication Users

Users with particular, restricted authorizations are required in all ABAP systems in your system landscape for communication between the central monitoring system (CEN), the monitored systems, and CCMS agents. RFC calls are triggered from CEN to monitored ABAP systems to pull monitoring data. If agents are used in monitored ABAP systems, data is pushed to the central system. Data from non-ABAB systems and non-SAP components is exclusively pushed to CEN by local agents. Agents require a communication user in CEN to be able to log on to it.

SAP recommends that you create and use the user CSMREG for this purpose in all relevant components. This user must be assigned the role SAP_BC_CSMREG. The user CSMREG is also used to register The CCMS System Component (SCR) with a central repository.

For more details on the CSMREG user and its authorizations, see Creating the CSMREG User.

For more information on users, see User Types.

Roles Used in Central Monitoring

The following predefined user roles are available for displaying, setting up and performing central monitoring functions and for communication:

·        SAP_BC_BASIS_MONITORING

This role contains authorizations for displaying data for the central monitoring of an SAP system landscape using the CCMS monitoring infrastructure.
Various SAP tools are used to do this (SMxx, RZxx, and STxx transaction codes).

·        SAP_BC_BASIS_ADMIN

This role contains all authorizations for setting up and performing the central monitoring of an SAP system landscape using the CCMS monitoring infrastructure.
Various SAP tools are used to do this  (SMxx, RZxx, and STxx transaction codes).

·        SAP_BC_CSMREG

This role must be assigned to a communication user required by agents reporting to the central monitoring system. It provides specific, greatly restricted logon authorizations for CCMS agents  in the central monitoring system.

For more information, see the documentation Monitoring in the CCMS.

Authorizations Used in Central Monitoring

The role SAP_BC_BASIS_MONITORING contains the following authorizations:

Authorization Object	Field	Value
S_RFC	RFC_FUGR	FUGR
	RFC_NAME	SALC, SALF, SALF, SALH, SALP, SALS, SAL_CACHE_RECEIVE, SYST, SCSM*, SCCMSBI_UTIL_FUNCTIONS, RFC1, SPIS, SU53, SU56
	ACTVT	16
S_SPI_AUTH	ACTVT	03
S_TCODE	AL08, AL11, OS07, RSPFPAR, RZ10, RZ20, RZ21, SICF, SM12, SM13, SM21, SICF, SM51, SM58, SM66, SMGW, SMICM, SMMS, ST02, ST03G, ST04, ST05, ST07, ST10, ST11, STAD, STATTRACE, TU02
S_CCM_RECV	ACTVT	P0, P1, P2
	TABLE	*
S_ADMI_FCD	S_ADMI_FCD	NADM, PADM, SM21, ST0M, ST0R
S_BTCH_JOB	JOBACTION	RELE
	JOBGROUP	*
S_CCMS_CMC	ACTVT	03
	CMCAREA	BASIS
	CMCFUNC	APPSERV, CONFIG, HOST, SPIPROC, SYSTEM, WORKLOAD
S_CTS_ADMI
S_C_FUNCT	ACTVT	16
	CFUNCNAME	*
	PROGRAM	*
S_DATASET	ACTVT	33, A6
	FILENAME	*dev_*
	PROGRAM	*
S_ENQUE	S_ENQ_ACT	*
S_RZL_ADM	ACTVT	03
S_TOOLS_EX	AUTH
S_TRANSLAT	ACTVT
	TLANGUAGE
	TRANSOBJ
S_ALV_LAYO	ACTVT	23

Authorizations Used in Central Monitoring

The role SAP_BC_BASIS_ADMIN contains the following authorizations:

Authorization Object	Field	Value
S_ICFREC	ACTVT	02, 03, 06, 16, 63, 70, D1, DL, UL
	CLIENT	*
	SYSTEM	*
	USER	*
	ACTVT	16
S_SPI_AUTH	ACTVT	03, 23
	APPL_GROUP	*
S_TCODE	AL11, OS07, RZ03, RZ04, RZ10, RZ20, RZ21, SICF, SM01, SM02, SM04, SM12, SM13, SM21, SM21, SM28, SM35, SICFRECORDER, SM51, SM56, SM58, SM66, SMGW, SMGW, SMLG, SNL1, LST01, ST02, ST03, ST03N, ST03G, ST04, ST05, ST07, ST10, ST11, ST22, STAT, STAD, TU02, USMM
S_CCM_RECV	ACTVT	P0, P1, P2
	TABLE	*
S_ADMI_FCD	S_ADMI_FCD	*
S_BTCH_JOB	JOBACTION	RELE
	JOBGROUP	*
S_CCMS_CMC	ACTVT	02, 03
	CMCAREA	BASIS
	CMCFUNC	APPSERV, CONFIG, HOST, DATABASE, SPIPROC, SYSTEM, WORKLOAD
S_CTS_ADMI	CTS_ADMFCT	*
S_DCC	SDCC_DEV	*
	SDCC_RUN
S_DATASET	ACTVT	*
	FILENAME	*
	PROGRAM	*
S_ENQUE	S_ENQ_ACT	*
S_RZL_ADM	ACTVT	*
S_TOOLS_EX	AUTH	*
S_USER_GRP	ACTVT	*
	CLASS	*
S_TRANSLAT	ACTVT	*
	TLANGUAGE	*
	TRANSOBJ	*
S_ALV_LAYO	ACTVT	*