Generate Authorization Profiles

You must install the ABAP add-on using client 000, however the authorizations and roles delivered with the add-on are client-dependent. To make the authorizations and roles available to the client where you will run the ABAP agent, follow these steps:

1. Sign in to the SAP system using the client where the ABAP Agent will run.
2. Run transaction PFCG to display the Role Maintenance screen.
3. Enter /TRICE/SL_AUTHS in the Roles field and select .
4. In the Change Roles screen, select the Authorizations tab.
5. In the Maintain Authorizations and Generate Profiles section, select Change Authorization Data.
6. In the Change role: Authorizations screen, select to generate the authorization profiles.
7. Check that the SeaLights role /TRICE/SL_AUTHS has access to the following authorization objects:

/TRICE/OBJ — SeaLights Custom Authorization

Field	Value
/TRICE/CMP	CORE
ACTVT	16 (Execute)

S_RFC — RFC Function Module Access

Field	Values
ACTVT	16 (Execute)
RFC_TYPE	FUGR
	FUNC
RFC_NAME	/TRICE/*
	DDIF_FIELDINFO_GET
	GET_SYSTEM_TIME_REMOTE
	PERF_TRA_DIA
	RFC1
	RFCPING
	RFC_GET_FUNCTION_INTERFACE
	RFC_GET_TABLE_ENTRIES
	RFC_SYSTEM_INFO
	SCMON_COLLECT
	SCSM_COLLECTOR
	SDIFRUNTIME
	SRFC
	SWNC_COLLECTOR_GET_AGGREGATES
	SWNC_COLLECTOR_STARTER
	SYSU

S_TABU_NAM — Table Name Access

Field	Values
ACTVT	03 (Display)
TABLE	/IWBEP/I_MGW_SRH
	/IWBEP/I_SBD_GA
	/IWBEP/I_SBO_ET
	/IWFND/I_MED_SRH
	BADI_IMPL
	BADI_SPOT
	CROSS
	CVERS
	D020S
	DD03L
	DF14L
	E070
	E071
	E071K
	E07T
	ENHINCINX
	ENHOBJ
	ENHSPOTOBJ
	O2APPL
	PAT03
	SCMON_CONFIG
	SCMON_VDATA
	SEOCLASS
	SEOCOMPODF
	SEOMETAREL
	SPROXREG
	SRVB_SERVICES
	SRVD_RT_ENTITIES
	SXC_CLASS
	SXC_EXIT
	SXS_INTER
	TADIR
	TDEVC
	TFDIR
	TMDIR
	TPALOG
	TRDIR
	TSTC
	TSTCP
	TTZCU
	UST04
	UST10C
	UST10S
	UST12
	WBCROSSGT
	WBCROSSI
	WDY_COMPONENT
	WDY_CONTROLLER
	WDY_INTF_IMPLEM
	WDY_WB_SOURCEMAP

S_TABU_RFC — RFC Table Access

Field	Value
ACTVT	03 (Display)

S_ADMI_FCD — System Administration

Field	Values
S_ADMI_FCD	SCMA, SCMD

Required for SCMON data collection (SCMON_COLLECT RFC). Without this authorization object, the agent can connect and read tables but cannot invoke the SCMON collector.