SAP ABAP ERP Required Privileges

A SAP ABAP ERP Required Privileges

This appendix lists the required privileges for accessing the SAP system using Oracle Data Integrator.

An SAP dialog user is required for connecting to the SAP system, for the RKM installation and for the LKM execution during development. A SAP RFC user is not sufficient.

During development, this user must have a developer license key. License keys can be retrieved from http://service.sap.com. Any execution attempts without this developer license key will lead to failure and may cause the need for clean-up operations.

For RKM and LKM execution in production, an SAP RFC user is sufficient.

These SAP user types can be used for the following operations:

Table A-1 Required SAP User Types

Operation	Required SAP User Type
RKM: Setup	SAP Dialog user
RKM: Reverse Engineering	SAP Dialog user or SAP RFC user
LKM: Development	SAP Dialog user or SAP RFC user
LKM: Production	SAP Dialog user or SAP RFC user

The following tables list the privileges required for using SAP ABAP Knowledge Modules.

A.1 Important points to consider

Consider the following points while configuring the SAP privileges:

S_DATASET is an authorization object that controls access to physical file, so you need to provide access to SAP directories & folder mounted path. The values provided here are sample paths, you need to provide your landscape directories path or provide *(all).
NR or (NR) means NOT REQUIRED.

A.2 Authorizations Required for RKM SAP ERP Upload

The following SAP authorizations are required only in rare cases, when explicitly requested by Oracle product support. For standard installations, these authorizations are not required.

It is not required in TR-based installation.

Note:

Developer key is required in this authorization.

Object	Field Name	Value (ECC6-EHP3)	Value (ECC6-EHP7) & (ECC6-EHP8)
`S_RFC`	`ACTVT`	`16`	`16`
`S_RFC`	`RFC_NAME`	`RFC1, SDIFRUNTIME, SUTL, SYST, ZODI_FGR_PROD*, ZODI_FGR`	`RFC1, SDIFRUNTIME, SUTL, SYST, ZODI_FGR_PROD*, ZODI_FGR`
`S_RFC`	`RFC_TYPE`	`FUGR`	`FUGR`
`S_TCODE`	`TCD`	`SU53,SE38`	`SE38, WE30, SU53`
`S_ADMI_FCD`	`S_ADMI_FCD`	`NR`	`RFCA`
`S_CTS_ADMI`	`CTS_ADMFCT`	`TABL`	`TABL`
`S_CTS_SADM`	`CTS_ADMFCT`	`NR`	`TABL`
`S_CTS_SADM`	`DESTSYS`	`NR`	`*`
`S_CTS_SADM`	`DOMAIN`	`NR`	`*`
`S_DATASET`	`ACTVT`	`34`	`33, 34`
`S_DATASET`	`FILENAME`	`*`	`*`
`S_DATASET`	`PROGRAM`	`SAPLSTRF`	`*`
`S_TABU_DIS`	`ACTVT`	`3`	`02, 03`
`S_TABU_DIS`	`DICBERCLS`	`*`	`*`
`S_TABU_NAM`	`ACTVT`	`NR`	`02, 03`
`S_TABU_NAM`	`TABLE`	`NR`	`*`
`S_DEVELOP`	`ACTVT`	`01,02,03`	`01, 02, 03, 06`
`S_DEVELOP`	`DEVCLAS`	`$TMP, ZODI_LKM_PCKG, ZODI_RKM_PCKG`	`$TMP, ZODI_LKM_PCKG, ZODI_RKM_PCKG`
`S_DEVELOP`	`OBJNAME`	`Z$$$XRFC, ZODI*`	`Z$$$XRFC, ZODI*`
`S_DEVELOP`	`OBJTYPE`	`DEVC, FUGR, FUNC, PROG`	`DEVC, FUGR, FUNC, PROG`
`S_DEVELOP`	`P_GROUP`		`''`
`S_PROGRAM`	`P_ACTION`	`NR`	`BTCSUBMIT, SUBMIT, VARIANT`
`S_PROGRAM`	`P_GROUP`	`NR`	`*`
`S_SYS_RWBO`	`ACTVT`	`NR`	`01, 02, 03, 05, 06, 23`
`S_SYS_RWBO`	`DESTSYS`	`NR`	`*`
`S_SYS_RWBO`	`DOMAIN`	`NR`	`''`
`S_SYS_RWBO`	`TTYPE`	`NR`	`DTRA`
`S_TRANSPRT`	`ACTVT`	`01,03`	`01, 02, 03, 06`
`S_TRANSPRT`	`TTYPE`	`DTRA,TASK`	`*`
`S_IDOCDEFT`	`ACTVT`	`NR`	`3`
`S_IDOCDEFT`	`EDI_CIM`	`NR`
`S_IDOCDEFT`	`EDI_DOC`	`NR`
`S_IDOCDEFT`	`EDI_TCD`	`NR`

A.3 Authorizations Required for RKM SAP ERP Execution

The following SAP authorizations are required for reverse engineering the SAP models using RKM SAP ERP.

Object	Field Name	Value (ECC6-EHP3)	Value (ECC6-EHP7) & (ECC6-EHP8)
`S_RFC`	`ACTVT`	`16`	`16`
`S_RFC`	`RFC_NAME`	`RFC1, SDIFRUNTIME, SUTL, SYST, ZODI_FGR_PROD*, ZODI_FGR`	`RFC1, SDIFRUNTIME, SUTL, SYST, ZODI_FGR_PROD*, ZODI_FGR`
`S_RFC`	`RFC_TYPE`	`FUGR`	`FUGR`
`S_TCODE`	`TCD`	`SU53, SE38`	`SU53, SE38`
`S_CTS_ADMI`	`CTS_ADMFCT`	`NR`	`TABL`
`S_DATASET`	`ACTVT`	`NR`	`34`
`S_DATASET`	`FILENAME`	`NR`	`*`
`S_DATASET`	`PROGRAM`	`NR`	`SAPLSTRF`
`S_TABU_DIS`	`ACTVT`	`03`	`02, 03`
`S_TABU_DIS`	`DICBERCLS`	`*`	`*`
`S_TABU_NAM`	`ACTVT`	`NR`	`02, 03`
`S_TABU_NAM`	`TABLE`	`NR`	`*`
`S_TRANSPRT`	`ACTVT`	`01, 03`	`01, 03`
`S_TRANSPRT`	`TTYPE`	`DTRA, TASK`	`DTRA, TASK`

A.4 Authorizations Required for LKM SAP ERP Upload

The following SAP authorizations are required for running mappings using the SAP ERP LKMs in SAP development environment with Upload ABAP Option Enabled.

Note:

Developer Key is required in this authorization.

Object	Field Name	Value (ECC6-EHP3)	Value (ECC6-EHP7) & (ECC6-EHP8)
`S_RFC`	`ACTVT`	`16`	`16`
`S_RFC`	`RFC_NAME`	`RFC1, SDIFRUNTIME, SYST, ZODI_FGR, ZODI_FGR_PROD_*`	`RFC1, SDIFRUNTIME, SYST, ZODI_FGR, ZODI_FGR_PROD_*`
`S_RFC`	`RFC_TYPE`	`FUGR`	`FUGR`
`S_TCODE`	`TCD`	`SU53, SE38`	`SE38, SU53`
`S_ADMI_FCD`	`S_ADMI_FCD`	`RFCA, SFTP`	`RFCA, SFTP`
`S_BTCH_ADM`	`BTCADMIN`	`Y`	`Y`
`S_BTCH_JOB`	`JOBACTION`	`RELE`	`RELE`
`S_BTCH_JOB`	`JOBGROUP`	`''`	`''`
`S_CTS_ADMI`	`CTS_ADMFCT`	`TABL`	`TABL`
`S_DATASET`	`ACTVT`	`06,33,34`	`06,33,34`
`S_DATASET`	`FILENAME`	`*`	`*`
`S_DATASET`	`PROGRAM`	`*`	`SAPLSLOG, SAPLSTRF, SAPLZ, ZODI`
`S_DEVELOP`	`ACTVT`	`01`	`01`
`S_DEVELOP`	`DEVCLASS`	`*`	`*`
`S_DEVELOP`	`OBJNAME`	`ZODI*`	`ZODI*`
`S_DEVELOP`	`OBJTYPE`	`FUGR, FUNC`	`FUGR, FUNC`
`S_DEVELOP`	`P_GROUP`	`NR`
`S_TRANSPRT`	`ACTVT`	`01, 02`	`01, 02`
`S_TRANSPRT`	`TTYPE`	`DTRA,TASK`	`DTRA,TASK`
`S_APPL_LOG`	`ACTVT`	`06`	`6`
`S_APPL_LOG`	`ALG_OBJECT`	`ZODI_APPOBJ`	`ZODI_APPOBJ`
`S_APPL_LOG`	`ALG_SUBOBJ`	`ZODI_SUBOBJ`	`ZODI_SUBOBJ`
`S_TABU_DIS`	`ACTVT`	`3`	`3`
`S_TABU_DIS`	`DICBERCLS`	`*`	`*`

A.5 Authorizations Required for LKM SAP ERP Execution

The following SAP authorizations are required for running mappings using the SAP ERP LKMs in a SAP production environment, when LKM option Upload ABAP Code is disabled (QA or Production).

Object	Field Name	Value (ECC6-EHP3)	Value (ECC6-EHP7) & (ECC6-EHP8)
`S_RFC`	`ACTVT`	`16`	`16`
`S_RFC`	`RFC_NAME`	`RFC1, SDIFRUNTIME, SYST, ZODI_FGR_PROD*`	`RFC1, SDIFRUNTIME, SYST, ZODI_FGR_PROD*,RFC_METADATA`
`S_RFC`	`RFC_TYPE`	`FUGR`	`FUGR`
`S_ADMI_FCD`	`S_ADMI_FCD`	`SFTP`	`SFTP`
`S_BTCH_ADM`	`BTCADMIN`	`Y`	`Y`
`S_BTCH_JOB`	`JOBACTION`	`RELE`	`RELE`
`S_BTCH_JOB`	`JOBGROUP`	`''`	`''`
`S_DATASET`	`ACTVT`	`06,33,34`	`06,33,34`
`S_DATASET`	`FILENAME`	`*`	`*`
`S_DATASET`	`PROGRAM`	`SAPLSLOG, SAPLSTRF, SAPLZODI, ZODI, SAPLZODI_FGR_PROD*`	`SAPLSLOG, SAPLSTRF, SAPLZODI, SAPLZODI_FGR_PROD, ZODI*`
`S_TRANSPRT`	`ACTVT`	`01, 02`	`01, 02`
`S_TRANSPRT`	`TTYPE`	`DTRA, TASK`	`DTRA, TASK`
`S_APPL_LOG`	`ACTVT`	`06`	`06`
`S_APPL_LOG`	`ALG_OBJECT`	`ZODI_APPOBJ`	`ZODI_APPOBJ`
`S_APPL_LOG`	`ALG_SUBOBJ`	`ZODI_SUBOBJ`	`ZODI_SUBOBJ`