Authorizations for Configuring Central CTS

To be able to configure central CTS, the logon user must be assigned specific authorizations depending on which tasks he needs to perform.

Note that the user who performs a validation in the Central CTS Configuration Web UI (logon user) must also exist in the managed systems for which he wants to perform the validation. Otherwise, the systems cannot be validated.

In general, the user must have copies of the following roles assigned:

On the central CTS server (SAP Solution Manager):
- SAP_BC_TRANSPORT_ADMINISTRATOR
On the managed systems:
- SAP_BC_TRANSPORT_OPERATOR: Required for distributing CTS plug-ins
- SAP_BC_TRANSPORT_ADMINISTRATOR: Required if the managed system is not in the same transport domain as the central CTS server.

If you do not want to use the predefined authorizations or if they contain too many authorizations, you can restrict the authorizations by using the following authorization objects individually:

Task	Authorization
Starting the Central CTS Configuration Web UI using the transaction code SZENCONFIG.	The user who wants to start the UI using the transaction code SZENCONFIG needs to be assigned authorization object S_TCODE with field TCD and value SZENCONFIG. This authorization object is part of the roles SAP_BC_TRANSPORT_OPERATOR and SAP_BC_TRANSPORT_ADMINISTRATOR as of SAP NetWeaver 7.0 Enhancement Package 2, SP13.
Displaying objects on the UI including the following tasks: Searching for systems or system clusters Displaying clusters Displaying search help and value help	Display authorization: The user needs to be assigned authorization object S_TRANSPRT with field ACTVT and value 03.
Changing objects including the following tasks: Creating, changing, or deleting system clusters Changing TMS parameters Distributing the TMS configuration Distributing CTS plug-ins to the managed systems	Change authorization: The user needs to be assigned the authorization object S_CTS_ADMI with field CTS_ADMFC and value TABL. Note For plug-in distribution, the user also needs to be assigned authorization object S_TRANSPRT with field ACTVT and value 03 as well as authorization object S_CTS_ADMI with field CTS_ADMFC and value IMPA on the managed system. End of the note.

Task

Authorization

Starting the Central CTS Configuration Web UI using the transaction code SZENCONFIG.

The user who wants to start the UI using the transaction code SZENCONFIG needs to be assigned authorization object S_TCODE with field TCD and value SZENCONFIG.

This authorization object is part of the roles SAP_BC_TRANSPORT_OPERATOR and SAP_BC_TRANSPORT_ADMINISTRATOR as of SAP NetWeaver 7.0 Enhancement Package 2, SP13.

Displaying objects on the UI including the following tasks:

Searching for systems or system clusters
Displaying clusters
Displaying search help and value help

Display authorization: The user needs to be assigned authorization object S_TRANSPRT with field ACTVT and value 03.

Changing objects including the following tasks:

Creating, changing, or deleting system clusters
Changing TMS parameters
Distributing the TMS configuration
Distributing CTS plug-ins to the managed systems

Change authorization: The user needs to be assigned the authorization object S_CTS_ADMI with field CTS_ADMFC and value TABL.

Note Note

For plug-in distribution, the user also needs to be assigned authorization object S_TRANSPRT with field ACTVT and value 03 as well as authorization object S_CTS_ADMI with field CTS_ADMFC and value IMPA on the managed system.

End of the note.

Note Note

If the user needs both display and change authorization, assign both authorizations.

End of the note.

More Information

Authorizations in the CTS
Transport Operator
Transport Administrator
For more information on authorization object S_TCODE, see Authorization Checks. If the link does not work, you can search for this documentation or use the following navigation path http://help.sap.com/nw702 Application Help Function-Oriented View: English Security Identity Management User and Role Administration of AS ABAP Developer Documentation for User and Role Administration Authorization Checks .
For more information on the releases and Support Packages which delivered changes to the roles SAP_BC_TRANSPORT_OPERATOR and SAP_BC_TRANSPORT_ADMINISTRATOR, see SAP Note 1748949.