To be able to configure central CTS, the logon user must be assigned specific authorizations depending on which tasks he needs to perform.
Note that the user who performs a validation in the Central CTS Configuration Web UI (logon user) must also exist in the managed systems for which he wants to perform the validation. Otherwise, the systems cannot be validated.
In general, the user must have copies of the following roles assigned:
On the central CTS server (SAP Solution Manager):
SAP_BC_TRANSPORT_ADMINISTRATOR
On the managed systems:
SAP_BC_TRANSPORT_OPERATOR
: Required for distributing CTS plug-ins
SAP_BC_TRANSPORT_ADMINISTRATOR
: Required if the managed system is not in the same transport domain as the central CTS server.
If you do not want to use the predefined authorizations or if they contain too many authorizations, you can restrict the authorizations by using the following authorization objects individually:
Task | Authorization |
---|---|
Starting the Central CTS Configuration Web UI using the transaction code SZENCONFIG. | The user who wants to start the UI using the transaction code SZENCONFIG needs to be assigned authorization object S_TCODE with field TCD and value SZENCONFIG. This authorization object is part of the roles SAP_BC_TRANSPORT_OPERATOR and SAP_BC_TRANSPORT_ADMINISTRATOR as of SAP NetWeaver 7.0 Enhancement Package 2, SP13. |
Displaying objects on the UI including the following tasks:
| Display authorization: The user needs to be assigned authorization object S_TRANSPRT with field ACTVT and value 03. |
Changing objects including the following tasks:
| Change authorization: The user needs to be assigned the authorization object S_CTS_ADMI with field CTS_ADMFC and value TABL. |
Distributing CTS plug-ins to the managed systems | On the CTS server, the user needs to be assigned change authorization (see above) and authorization object S_TRANSPRT with field ACTVT and value 03 as well as authorization object S_CTS_ADMI with field CTS_ADMFC and value IMPA on the managed system. On the managed systems, the user needs to be assigned the following authorization objects:
|
Note
If the user needs both display and change authorization, assign both authorizations.
For more information on authorization object S_TCODE, see Authorization Checks. If the link does not work, you can search for this documentation or use the following navigation path .
For more information on the releases and Support Packages which delivered changes to the roles SAP_BC_TRANSPORT_OPERATOR and SAP_BC_TRANSPORT_ADMINISTRATOR, see SAP Note 1748949.