Defining Users for Background Processing

When defining users for background processing, note the following:

• Define specific users to use for background processing. Define them as system users (non-dialog) and give them only the necessary authorizations that are needed for the executed programs.

• Separate the authorizations needed for job definition and job execution.

  The user can define the job steps, but the administrator executes the job.

  Note

  To define job steps that run under a different user, you need an authorization for the authorization object S_BTCH_NAM. S_BTCH_NAM determines which users you can choose when scheduling a job. You should give this authorization to the batch administrator only.

• Restrict the batch administrators to run job steps using only the previously defined batch users.

• Make sure that job steps cannot be executed using any of the super users (for example SAP*, DDIC).