0% found this document useful (1 vote)
757 views3 pages

SAP OData Auth

This document discusses authorization objects and template roles for SAP Gateway systems below and equal to or above version 7.40. It lists the minimum TCodes needed for SU22 and the authorization objects for Gateway Builder and various SAP roles like Developer, User, Administrator. It also mentions the provided template roles for framework and application services.

Uploaded by

SomnathChoudhury
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (1 vote)
757 views3 pages

SAP OData Auth

This document discusses authorization objects and template roles for SAP Gateway systems below and equal to or above version 7.40. It lists the minimum TCodes needed for SU22 and the authorization objects for Gateway Builder and various SAP roles like Developer, User, Administrator. It also mentions the provided template roles for framework and application services.

Uploaded by

SomnathChoudhury
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 3

Gateway Builder authorization

 Tcodes at the minimum used for SU22: -


o SEGW
o /IWFND/MAINT_SERVICE
o /IWFND/GW_CLIENT

o /IWFND/ERROR_LOG

o /IWFND/CACHE_CLEANUP

o /IWFND/MED_ACTIVATE

o /IWFND/TRACES

o /IWFND/SRV_VALIDATE

o SM59

o IWFND/IWF_ACTIVATE

 SU22 proposal in SAP GW System below 7.40

Authorization Object Description


/IWBEP/SB Authorization for the Gateway Service Builder
S_ADMI_FCD System Authorizations
S_ALV_LAYO ALV Standard Layout
S_APPL_LOG Applications log
S_BDS_DS BC-SRV-KPR-BDS: Authorizations for Document Set
S_CTS_ADMI Administration Functions in Change and Transport System
S_CTS_SADM System-Specific Administration (Transport)
S_DATASET Authorization for file access
S_DEVELOP ABAP Workbench
S_DOKU_AUT SE61 Documentation Maintenance Authorization
S_GUI Authorization for GUI activities
S_OC_TCD SAPoffice: Transaction Code Authorizations
S_PROJECT Project Management: Project authorization
S_RFC Authorization Check for RFC Access
S_RFC_ADM Administration for RFC Destination
S_RS_ADMWB Data Warehousing Workbench - Objects
S_RS_AUTH BI Analysis Authorizations in Role
S_RS_COMP Business Explorer - Components
S_RS_RSTT Authorization Object for RS Trace Tool
S_TABU_CLI Cross-Client Table Maintenance
S_TABU_DIS Table Maintenance (via standard tools such as SM30)
S_TCODE Transaction Code Check at Transaction Start
S_TRANSLAT Translation environment authorization object
S_TRANSPRT Transport Organizer
S_USER_GRP User Master Maintenance: User Groups
S_ICF_ADM Administration for Internet Communication Framework
S_Q_GOVERN Specify profiles, handle exemptions
S_APPL_LOG Applications log

 SU22 proposal in SAP GW System equal and above 7.40

Authorization Object Description


/IWBEP/SB Authorization for the SAP Gateway Service Builder
S_ADMI_FCD System Authorizations
S_ALV_LAYO ALV Standard Layout
S_ALV_LAYR ALV Report-Specific Layouts
S_APPL_LOG Applications log
S_BDS_DS BC-SRV-KPR-BDS: Authorizations for Document Set
S_CTS_ADMI Administration Functions in Change and Transport System
S_CTS_SADM System-Specific Administration (Transport)
S_DATASET Authorization for file access
S_DEVELOP ABAP Workbench
S_DOKU_AUT SE61 Documentation Maintenance Authorization
S_GUI Authorization for GUI activities
S_OC_TCD SAPoffice: Transaction Code Authorizations
S_PERSONAS Personas: Authorizations regarding flavor use
S_PROJECT Project Management: Project authorization
S_Q_GOVERN Specify profiles, handle exemptions
S_RFC Authorization Check for RFC Access
S_RFC_ADM Administration for RFC Destination
S_RS_ADMWB Data Warehousing Workbench - Objects
S_RS_AUTH BI Analysis Authorizations in Role
S_RS_COMP Business Explorer - Components
S_RS_COMP1 Business Explorer - Components: Enhancements to the Owner
S_RS_RSTT Authorization Object for RS Trace Tool
S_RS_WSPAC BW Workspace
S_SERVICE Check at Start of External Services
S_SYS_RWBO System-Specific Authorization Object for WBO Proxy Functions
S_TABU_CLI Cross-Client Table Maintenance
S_TABU_DIS Table Maintenance (using standard tools such as SM30)
S_TABU_NAM Table Access by Generic Standard Tools
S_TCODE Transaction Code Check at Transaction Start
S_TRANSLAT Translation environment authorization object
S_TRANSPRT Transport Organizer
S_USER_GRP User Master Maintenance: User Groups
S_APPL_LOG Applications log

/IWFND/SG_MED_CATALOG :- (framework or Application Services )

 SAP Provided template roles for this as well.

SAP Gateway Developer Role

Template Type Template Name Template for


Framework /IWFND/RT_BOR_DEV SAP Gateway BOR Developer
Framework /IWFND/RT_DEVELOPER SAP Gateway Developer
OData Channel /IWBEP/RT_MGW_DEV OData Channel Developer
SAP Gateway User Role

Template Type Template Name Template for


Framework /IWFND/RT_GW_USER SAP Gateway User
SAP Gateway Technical User for Notifications
Framework /IWFND/RT_TU_NOTIF
OData Channel /IWBEP/RT_MGW_USR OData Channel User
/IWHDB/RT_USER OData Channel HANA Integration User
OData Channel
/IWBEP/RT_SUB_USR On-behalf Subscription User
OData Channel
Business Enablement /IWBEP/RT_BEP_USR Business Enablement Provisioning User
Provisioning
Workflow /IWWRK/RT_WF_GW_USR SAP Gateway Workflow User
/IWWRK/RT_WF_SUB_USR On-Behalf Subscription for SAP Gateway Workflow
Workflow
Services

 If anything related to Gateway Administrator role is required, the same can be provided as and when required.

You might also like