Show TOC

Background documentationAuthorizations for Configuring Central CTS

 

To be able to configure central CTS, the logon user must be assigned specific authorizations depending on which tasks he needs to perform.

Note that the user who performs a validation in the Central CTS Configuration Web UI (logon user) must also exist in the managed systems for which he wants to perform the validation. Otherwise, the systems cannot be validated.

In general, the user must have copies of the following roles assigned:

  • On the central CTS server (SAP Solution Manager):

    • SAP_BC_TRANSPORT_ADMINISTRATOR

  • On the managed systems:

    • SAP_BC_TRANSPORT_OPERATOR: Required for distributing CTS plug-ins

    • SAP_BC_TRANSPORT_ADMINISTRATOR: Required if the managed system is not in the same transport domain as the central CTS server.

If you do not want to use the predefined authorizations or if they contain too many authorizations, you can restrict the authorizations by using the following authorization objects individually:

Task

Authorization

Starting the Central CTS Configuration Web UI using the transaction code SZENCONFIG.

The user who wants to start the UI using the transaction code SZENCONFIG needs to be assigned authorization object S_TCODE with field TCD and value SZENCONFIG.

This authorization object is part of the roles SAP_BC_TRANSPORT_OPERATOR and SAP_BC_TRANSPORT_ADMINISTRATOR as of SAP NetWeaver 7.0 Enhancement Package 2, SP13.

Displaying objects on the UI including the following tasks:

  • Searching for systems or system clusters

  • Displaying clusters

  • Displaying search help and value help

Display authorization: The user needs to be assigned authorization object S_TRANSPRT with field ACTVT and value 03.

Changing objects including the following tasks:

  • Creating, changing, or deleting system clusters

  • Changing TMS parameters

  • Distributing the TMS configuration

Change authorization: The user needs to be assigned the authorization object S_CTS_ADMI with field CTS_ADMFC and value TABL.

Distributing CTS plug-ins to the managed systems

On the CTS server, the user needs to be assigned change authorization (see above) and authorization object S_TRANSPRT with field ACTVT and value 03 as well as authorization object S_CTS_ADMI with field CTS_ADMFC and value IMPA on the managed system.

On the managed systems, the user needs to be assigned the following authorization objects:

  • S_TRANSPRT with field ACTVT and value 03

  • S_CTS_ADMI with field CTS_ADMFC and value IMPA

  • S_DATASET with the values required to access the transport directory. This authorization is required to read files.

  • S_RFC with the following values:

    • field ACTVT and value 16

    • field RFC_NAME and values STPA and TMSC

    • field RFC_TYPE and value FUGR

Note Note

If the user needs both display and change authorization, assign both authorizations.

End of the note.

More Information

  • Authorizations in the CTS

  • Transport Operator

  • Transport Administrator

  • For more information on authorization object S_TCODE, see Authorization Checks. If the link does not work, you can search for this documentation or use the following navigation path Start of the navigation path http://help.sap.com/nw702Information published on SAP site Next navigation step Application Help Next navigation step Function-Oriented View: English Next navigation step Security Next navigation step Identity Management Next navigation step User and Role Administration of AS ABAP Next navigation step Developer Documentation for User and Role Administration Next navigation step Authorization Checks End of the navigation path.

  • For more information on the releases and Support Packages which delivered changes to the roles SAP_BC_TRANSPORT_OPERATOR and SAP_BC_TRANSPORT_ADMINISTRATOR, see SAP Note 1748949Information published on SAP site.