Clients and authorizations
Some of the jobs specified work with client-specific objects (for example, jobs). Whether a reorganization has any cross-client influence then normally depends on particular authorizations. The following table displays all of the client-dependent jobs. All of the other jobs are not client-dependent.
Job name:
SAP_REORG_BATCHINPUT
Jobs that are not client-dependent perform a reorganization in all affected clients. They require neither special authorizations nor a special user name.
The job SAP_COLLECTOR_FOR_PERFMONITOR must always be scheduled in client 000 with user DDIC or with a user with the same authorization.
For some jobs, note the following correlations:
- Job SAP_REORG_JOBS:
- See SAP Note 784969.
- Job SAP_REORG_SPOOL:
- Authorization S_ADMI_FCD-S_ADMI_FCD = 'SPAD'
Reorganization runs in chosen client (Client = '*', then runs in all clients)
- Authorization S_ADMI_FCD-S_ADMI_FCD = 'SPAR'
Reorganization only in the client in which the actual job is running
- Job SAP_REORG_BATCHINPUT:
- Authorization profile S_BDC_MONI - BDCAKTI =
'REOG'
S_BDC_MONI - BDCGROUPID = '*'
Reorganization only in the client in which the job is running
Note:
- The authorizations always relate to the user under whose ID the job is being processed.
- If this user has the necessary authorizations to work in a cross-client manner, then it does not matter in which client the actual job is running.
- User ADMIN has the Authorization S_BTCH_ADM = 'Y'. If Job SAP_REORG_JOBS is now scheduled with User ADMIN, the jobs are reorganized in all clients.
- User REORG has the Authorization profile S_BDC_ALL. If Job SAP_REORG_BATCHINPUT is now scheduled with User REORG in Client 002, the batch input objects are reorganized in Client 002.
- If the job SAP_REORG_ABAPDUMPS is scheduled in any client, all ABAP short dumps are reorganized in all clients.
- User SPOOLADM has the authorization S_ADMI_FCD-S_ADMI_FCD = 'SPAD'. If the job SAP_REORG_SPOOL is now scheduled with user SPOOLADM and client 123 is specified for the program parameters, then the spool objects in client 123 are reorganized irrespective of the client in which the actual job is running. If you enter '*' as the client, all clients are reorganized.
NOTES: The job steps should be planned using a language that is available in the system. English should be available in every system. However, some of these jobs have steps set by default in German. The following is valid until further notice: the jobs must be modified if necessary when, for example, a Russian code page is used.
This Note is Release-Independent
good guidence and the following of the content is so helpfull and usefull. SAP SECURITY TRAINING
ReplyDeleteHi this is shiva kumar i am working on sap bwbi.. i just browsing blog s on hana there i found your blog is interesting .. i like to say thank for sharing a information on sap sap-security
ReplyDelete