Show TOC

Roles and Authorizations for Background ProcessingLocate this document in the navigation structure

Use

The roles provided contain authorizations. The following predefined user roles are available:

  • SAP_BC_BATCH_ADMIN

    This role contains all authorizations for background processing administration, including the creation of background jobs and general administrations functions ( SM <nn> transaction codes, in particular SM36, SM37, SM50, and SM51).

    Note

    Note that the administrator role includes operating system access due to the fact that the administrator can define operating system commands.

    For more information, see Logical Operating System Commands.

This role contains non-critical basis authorizations for all users, including job creation and job release.

Authorization Object

Fields

Value

Description

S_BTCH_JOB

JOBACTION

DELE

Delete other users' background jobs.
   

LIST

Is not used
   

PLAN

Copy or repeat other users' jobs.
   

PROT

Display job logs belonging to other users
   

RELE

Release jobs (including your own)
   

SHOW

Display definitions of other users' jobs
   

MODI

Change other users' background jobs.

see SAP Note 1623250 Information published on SAP site.
 

JOBGROUP

*

Reserved, set to *

S_BTCH_NAM

BTCUNAME

<name>

Authorized user when scheduling

S_BTCH_ADM

BTCADMIN

Y

User is batch administrator
   

C

Copy other users' jobs.

see SAP Note 1480677 Information published on SAP site.
   

A or B

Optional additional check when creating class A or B jobs.

see SAP Note 1695812 Information published on SAP site.
   

P

Special authorization to create periodic jobs,

see SAP Note 1716340 Information published on SAP site.

In addition, note the following:

  • A user with batch administrator privileges can do anything with its own jobs and those of other users in all clients (authorization object S_BTCH_ADM, field BTCADMIN set to Y). Without this authorization, users can only work on your own jobs in the client in which they are logged on. Using SAP Note 1623250 Information published on SAP site offers an optional mechanism that extends the possibilities of the user without the authorizations of the background administrator.

  • All users can schedule, cancel, delete, and check the status of their own jobs with no additional special authorizations. However, additional authorizations are needed for:

    • Releasing one's own batch jobs ( S_BTCH_JOB: Action= RELE)

    • Showing logs of all jobs ( S_BTCH_JOB: Action= PROT)

    • Assigning ABAP programs to a job step ( S_PROGRAM)

    • Assigning a different user to a job step ( S_BTCH_NAM).

      A user without batch administrator privileges is restricted to working with class C (low priority) jobs and to his or her own jobs in the client that he or she is logged on to.

  • Authorizations that allow a user to delete jobs or display information belonging to other users are:

    • Deleting the jobs belonging to other users ( S_BTCH_JOB: Action= DELE)

    • Display job definitions and spool lists belonging to other users ( S_BTCH_JOB: Action= SHOW)

  • For the execution of external commands within jobs, the user needs an authorization for the object S_LOG_COM.

More Information