SMD authorizations

[Former Member]

Hi all,

I'd like to create a SMD dialog user with some authorization restrictions. This user should only access to Root Cause Analysis/OS and DB/File System Browser functionality for one specified solution.

Which kind of role (Java/ABAP role) should I create and how ?

Best regards,

[Former Member]

Thanks for the answer.

The problem is the user just only has to access to the File System Browser functionality.

It should not have to access to other functionalities and other solutions that its solution

Regards,

[Former Member]

Hello Khamul,

there does not exist that one authorization fitting to your needs. But to give you a starting point take a look into "Root Cause Analysis User Administration Guide". In section 2.3.9 the user SAPSUPPORT and its authorizations are listed. If you copy these authorizations into customer namespace you will be able to limit the authorizations at least to one solution. Perhaps it is possible even to grant permission for selected RCA functionalities.

best regards

Frank

[Former Member]

Sorry, forgot to post where to find the Guide. /http://service.sap.com/diagnostics -> section Installation and Configuration -> User Administration Guide

Frank

[Former Member]

User Type: Service User (password must not expire)

Authorization: SAP_J2EE_ADMIN (Role)

Usage: Diagnostics Access to managed systems from Solution Manager

You do not need to create a new role, just assign SAP_J2EE_ADMIN role to it in ABAP backend system (if you have ABAP datasource in UME) and then you can assign ADMINISTRATOR role in Portal/Java system to this user. However, just SAP_J2EE_ADMIN will also work. But in our case we had to assign ADMINISTRATOR portal/java role too to this user.