Maintaining User Mappings of Many DBMS Users

To simplify user management of the database management system (DBMS), you can create and delete mappings between users in SAP NetWeaver Application Server for ABAP (SAP NetWeaver AS for ABAP) and a DBMS. Use report RSUSR_DBMS_USERS.

Prerequisites

You have customized SAP NetWeaver AS for ABAP to use DBMS user management.
You have logged on with a user, who has the required authorizations.

This report checks the authorization object S_USER_GRP for the activity 02 for editing and 03 for display.
You have made any required customization of the implementation to create valid user IDs on the DBMS.

By default the report maps the ABAP user to a DBMS user with exactly the same user ID. If a matching user exists in the DBMS, the report creates the mapping. If the matching user does not exist in the DBMS, the report creates a matching user in the DBMS.

Note

You can override the default behavior in a custom BAdI implementation. The restrictions on allowable user IDs for the DBMS and ABAP can be different. Use the BAdI to create a valid DBMS user ID for the connected database system.

The name of the BAdI definition is BADI_DBMS_USERNAME_MAPPING. This BAdI belongs to the enhancement spot ENH_DBMS_USERNAME_MAPPING of package SUSR_IDENTITY_DBMS. The interface of the BAdI contains one method, GET_DBMS_USERNAMES, which implements the mapping of ABAP user IDs to DBMS user IDs. The SUSR_SUID_BADI_PIF package interface of package SUSR_MAIN contains the interface. As a fallback implementation, the system performs a one-to-one mapping if there is no implementation available.

SAP delivers the BAdI implementation BADI_DBMS_USERNAME_PREFIX to add the prefix DBMS_ to the DBMS user IDs. This BAdI implementation is disabled by default.

Procedure

In ABAP: Program Execution (transaction SA38), start report RSUSR_DBMS_USERS.
In the User Selection section, enter user selection criteria.

Test your selection criteria by choosing the function Display users and choosing Execute. Then go back and adjust your selection criteria as required.
Choose the mapping operation.
- To remove existing mappings, choose Remove mappings to DBMS users.
  
  This function removes the mapping between ABAP users and DBMS users. If you remove the mapping, the DBMS user is not deleted. You cannot change the DBMS user mapped to the ABAP user directly. You must remove the DBMS user assignment before you can assign another DBMS user.
- To map DBMS users, choose Create and map DBMS users.
Determine if you want to generate passwords for any DBMS users created by the report.

By default the report does not create default passwords. If you enable this option, the report shows the generated passwords in the result log.
Choose Execute.