Authorizations 

The table below shows the pre-defined authorizations in SAP Systems that apply to the various roles. The corresponding authorization objects include S_TRANSPRT and S_CTS_ADMI.

Authorizations for Change and Transport Roles

Role	Authorizations
Quality Assurance (QA) Team	Not pre-defined in SAP Systems
Administrator (transport superuser)	S_CTS_ALL
Project Leader	S_CTS_PROJEC
Team Members / Developers	S_CTS_DEVELO
End Users	S_CTS_SHOW

TMS also uses a special user, TMSADM, for executing transports. TMSADM is an RFC user with authorizations limited to TMS activities.

If you use TMS, then you should be careful with the TMS authorizations (S_TMS_READ, S_TMS_WRITE, and S_TMS_RFC). If you do not use TMS, then protect the program tp at the operating system level.