Generate Authorization Profiles

You must install the ABAP addon using client 000, however the authorizations and roles delivered with the addon are client-dependent. To make the authorizations and roles available to the client where you will run the ABAP agent, follow these steps:

1. Sign in to the SAP system using the client where the ABAP Agent will run.
2. Run transaction PFCG to display the Role Maintenance screen.
3. Enter /TRICE/SL_AUTHS in the Roles field and select .
4. In the Change Roles screen, select the Authorizations tab.
5. In the Maintain Authorizations and Generate Profiles section, select Change Authorization Data.
6. In the Change role: Authorizations screen, select to generate the authorization profiles.
7. Check that the SeaLights role /TRICE/SL_AUTHS has access to the following authorization objects:

/TRICE/OBJ — SeaLights Custom Authorization

Field	Value
/TRICE/CMP	CORE
ACTVT	16 (Execute)

S_RFC — RFC Function Module Access

Field	Values
ACTVT	* (All)
RFC_TYPE	FUNC
RFC_NAME	/TRICE/*
	DDIF_FIELDINFO_GET
	GET_SYSTEM_TIME_REMOTE
	RFCPING
	RFC_GET_FUNCTION_INTERFACE
	RFC_GET_TABLE_ENTRIES
	RFC_SYSTEM_INFO
	SCMON_COLLECT
	SWNC_COLLECTOR_GET_AGGREGATES
	SWNC_COLLECTOR_STARTER

S_TABU_NAM — Table Name Access

Field	Values
ACTVT	03 (Display)
TABLE	CVERS, DD03L, O2APPL, SCMON_CONFIG, SCMON_VDATA, SPROXREG, TADIR, TDEVC, TFDIR, TMDIR, TRDIR, TSTC, TSTCP, TTZCU, WBCROSSGT, WBCROSSI, WDY_COMPONENT

S_TABU_RFC — RFC Table Access

Field	Value
ACTVT	03 (Display)

S_ADMI_FCD — System Administration

Field	Values
S_ADMI_FCD	SCMA, SCMD

Required for SCMON data collection (SCMON_COLLECT RFC). Without this authorization object, the agent can connect and read tables but cannot invoke the SCMON collector.