SDI - Design Time Object monitor - Flowgraph Scheduler failing - Which user-id drives the scheduler?

[former_member380976]

When scheduling flowgraphs to start on time intervals automatically, these fail with error code 258 - insufficient authorization.

Note - when started manually as a one-off task it executes successfully.

I have not yet found a proper documentation which explains which USER is driving the automated scheduler (*basis admin? - is it in the Hana Cockpit Admin this 'job user' is set to control the scheduler?)

We have many schemas & functioal owners and how can we make sure that the JOB user-id is granted access to execute ALL the flowgraphs automatically once and for all without having to grant access to each and one schema when developed? An example from SAP ERP would be the JOBRUN user which has SAP_ALL authorization. What is the equivalent security role for the SDI scheduler or what is SAP's suggested process?

[Former Member · Accepted solution]

This best practices document may help you

http://www.sap.com/documents/2016/07/d06029d1-7a7c-0010-82c7-eda71af511fa.html

[former_member380976]

Thanks for providing the guide attached. We have already the XS Job Scheduler activated.

WHAT are the correct roles to assign to the SDI_EXEC user? Does it need a role to be able to execute specific flowgraphs/schemas? And do we need to always grant/authorize the SDI_EXEC user execute etc to ALL schemas - OR - can this user be granted access to all schemas by with authorized profile like the SDI_ADMIN user?

*) it's a hazzle if we always have to grant the SDI_EXEC user access to any new development with a new schema...

Thoughts and experience on this?