What authorization is needed to create a BEX Global variant ?

Hi,

I'd like to authorize end-users to create BEX Global Variants. However, their standard settings won't allow them to do so: "you are not authorized to create variant xyz".

I'm not able to use SU53, for any reason it won't be tracked.

My user-id is capable to create these variants, because I have an admin role.

Now, before I start comparing the two user-ids along with the given roles and auth.-objects (what would be a huge task), I was wondering if there is someone who knows the appropriate object right out of the mind.

Thanks