⚠️ IMPORTANT INFORMATION for Avantra 24 Automation customers

From Avantra 24 for customers who are licensed for automations and have previously imported any automation transport there is no longer a requirement to import the standard Avantra monitoring transports before importing the automation transports!
 
ONLY THE AUTOMATION TRANSPORTS ARE REQUIRED and are accessed via the solution document here: How to guide: SAP Automation Templates Installation

Note: Make sure to import the workbench request before the customising request containing the role.



TABLE OF CONTENTS


TABLE OF CONTENTS


This solution document provides information about the content of all Avantra automation customizing transports released with version 24.3.0.001. In addition, the article provides an overview of all released automation customizing transports in correlation to the Avantra version.


1.0 History of role transports


Avantra VersionDateTransportsComments
24.3.0.001Sep 2024SAP >= 7.30 SP5 AVAK900745
Solman systems ASMK900048
  • Add Authorizations for client copy S_CLNT_CPY, S_CLNT_EXI, S_TABU_RFC, FB_SRV_TR, MDG_MDF_TR, S_A4C_FSAC.
  • And S_RFC: FINB_TR_CC_EXIT_ANALYZE_EXCL, MDG_TR_CC_EXIT_ANALYZE_EXCL, FINB_TR_CC_EXIT_ANALYZE, MDG_TR_CC_EXIT_ANALYZE
  • Add /AVANTRA/SYSREFRESH_BIZ_CLIENT
  • Add Solman only transport
  • Add /AVANTRA/SOLMAN to solman transport
24.2.0.00126 Jul 2024SAP >= 7.30 SP5 AVAK900706
  • Add S_BTCH_JOB action PLAN to sys refresh roles
24.2.0.00119 Jun 2024SAP >= 7.30 SP5 AVAK900696
  • Addition of /AVANTRA/ roles. 
  • Adding Data Warehousing Workbench to system refresh.
24.1.2.00105 Apr 2024SAP >= 7.30 SP5 AVAK900668
  • Update of all roles S_RFC, additional objects for ZAVANTRA_AUTOMATION_CLIENT
24.1.0.00129 Feb 2024SAP >= 7.30 SP5 AVAK900646
  • Addition of ZAVANTRA_AUTOMATION_JOB and ZAVANTRA_AUTOMATION_USER
24.0.2.00219 Jan 2024SAP >= 7.30 SP5 AVAK900632
  • Avantra role (ZAVANTRA) and the multiple automation roles (ZAVANTRA_AUTOMATION*) are now all include in a single role transport - AVAK900632 Role ZAVANTRA and Avantra automation roles V24.0.2.002
24.0.2.00110 Jan 2024SAP >= 7.30 SP5 AVAK900626
  • Update to ZAVANTRA role adding RFC: /OSP/SYSTEM_TIMEZONE, RFC_METADATA_GET, RFC_METADATA_GET_TIMESTAMP, SALC_MT_GET_TID_BY_NAME
24.0.0.00229 Nov 2023SAP >= 7.30 SP5 AVAK900610
23.3.3.0
SAP >= 7.30 SP5 AVAK900529
23.2.2.0
SAP >= 7.30 SP5 AVAK900519
23.2.0.0
SAP >= 7.30 SP5 AVAK900489
23.1.0.0
SAP >= 7.30 SP5 AVAK900428
23.0.0.0
SAP >= 7.30 SP5 AVAK900392
21.11.6.0
SAP >= 7.30 SP5 AVAK900343



Note: From Avantra 24 the automation customising transport now combines the standard interface monitoring role ZAVANTRA as well as the automation role ZAVANTRA_AUTOMATION.
Please refer to the solution document "24.2.0.001 Avantra interface customizing transports" for the details of the ZAVANTRA role.



2.0 Content of the /AVANTRA/AUTOMATION (ZAVANTRA_AUTOMATION) role transport



Cross-application authorization objects
B_ALE_LSYS
ALE/EDI: Maintaining Logical Systems		LOGSYS
Logical System		*


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

/SYSLINK/MONXAN2

/SYSLINK/MONXAN5

BAPI_CTREQUEST_CREATE

OCS_API_CALCULATE_QUEUE

OCS_API_CONFIRM_QUEUE

OCS_API_DEFINE_QUEUE

OCS_API_EXTRACT_ARCHIVES

OCS_API_GET_QUEUE_STATUS

OCS_API_GET_SPAM_VERSION

OCS_API_LOAD_EPS_FILES

OCS_API_PREPARE_SPAM_UPDATE

OCS_API_SCHEDULE_IMPORT_JOB

OCS_API_SET_SETTINGS

OCS_API_SKIP_PHASE

PFL_IMPORT_ACTIVE_SRV_PROFILES

RFCPING

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP

SPFL_API_DEL_AND_CREATE

SSFR_GET_ALL_STRUST_IDENTITIES

SSFR_REMOVE_APP_PSES

SWNC_COLLECTOR_CLEAN_SWNCMONI

RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


S_RFC_ADM

Administration for RFC Destination

ACTVT
Activity		02 Change
03 Display
06 Delete
ICF_VALUE
Internet Communication Framework Values		*
RFCDEST
Logical destination (specified in function call)		*
RFCTYPE
Type of Entry in RFCDES		All values


S_TCODE
Transaction Code Check at Transaction Start
TCD
Transaction Code

SA38, SAINT, SMT1, SPAD, SPAM





Basis: Administration
S_ADMI_FCD
System Authorizations
S_ADMI_FCD
System administration function		SPAA    Spool administration (device administration)
SPAB    Spool administration (general settings)
SPAC    Spool administration (device type, character sets)
SUM      Software Update Manager Tools



S_BTCH_JOB
Background Processing: Operations
JOBACTION
Job operations		RELE Release Jobs (Released Automatically When Scheduled)

JOBGROUP
Summary of jobs for a group		*


S_BTCH_NAM
Background Processing: Background User Name
BTCUNAME
Background User Name for Authorization Check		*


S_CTS_ADMI
Administration Functions in Change and Transport System
                      CTS_ADMFCT
Administration Tasks for Change and Transport System
*




S_CTS_SADM
System-Specific Administration (Transport)
CTS_ADMFCT
Administration Tasks for Change and Transport System		EPS1, EPS2, IMPA, IMPS, IMPT, TADD, TADM, TDEL
DESTSYS
Logical System		*
DOMAIN
TMS: Transport Domain		*




S_C_FUNCT
C calls in ABAP programs
ACTVT
Activity		16.  Execute
CFUNCNAME
Name of C Routine Callable Using CALL		SYSTEM
PROGRAM
Program Name with Search Help		SAPLOCS_FILEMGMT




S_DATASET
Authorization for file access
ACTVT
Activity		06 Delete
33 Read
34 Write
FILENAME
Physical file name		*
PROGRAM
Program Name with Search Help		CL_OCS_BINARY_FILE============CP

CL_OCS_BINARY_FILE_WRITER=====CP

SAPLSCCB

SAPLSLOG

SAPLSPFL

SAPLSTRF

SAPLTMSM



S_SPO_DEV
Spool: Device authorizations
SPODEVICE
Spool: Long device names		*



S_SRT_CF_C
SOAP Runtime: Web Service Consumer
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_CF_P
SOAP Runtime: Web Service Provider
ACTVT
Activity		03 Display
06 Delete
SRT_NAME
SRT Authorization Object Name		*




S_SRT_LRD
SOAP Runtime: Logcal Receiver Dete
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_PROF
OAP Runtime Profile Administratio
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*


S_SRT_SCEN
SOAP Runtime: Web Scenario
ACTVT
Activity		06 Delete
SRT_TYPE
SRT Authorization Check Type		*


S_SRT_TYPE
SOAP Runtime: Web Service Special
ACTVT
Activity		02 Change
03 Display
SRT_TYPE
SRT Authorization Check Type		GLOB (Global Settings)


S_SRT_UACC
SOAP Runtime User Accounts
ACTVT
Activity		06 Delete
SRT_TYPE
SRT Authorization Check Type		*


S_SRT_UASG
SOAP Runtime: User Account Assignment
ACTVT
Activity

06 Delete

SRT_NAME
SRT Authorization Object Name		*
SRT_NAME2
SRT Authorization Object Name		*



S_USER_GRP
User Master Maintenance: User Groups
ACTVT
Activity

03 Display

05 Lock

06 Delete

CLASS
User group in user master maintenance		*


S_USER_GRP
User Master Maintenance: User Groups
ACTVT
Activity		02 Change
CLASS
User group in user master maintenance		TMSADM


Basis - Development Environment
S_DEVELOP
ABAP Workbench
ACTVT
Activity		03 Display
DEVCLASS
Package		SOAP_CONFIG
OBJNAME
Object Name		SRT_WSP_CONFIG_FW_INIT
OBJTYPE
Object Type		FUGR
P_GROUP
ABAP Program Authorization Group		*


S_PROGRAM
ABAP: Program Flow Checks
P_ACTION
User Action in ABAP Program		SUBMIT Execute ABAP program
VARIANT Create and Maintain Variants
P_GROUP
Authorization group ABAP/4 program		*


S_SYS_RWBO
System-Specific Authorization for Transport Organizer       
ACTVT
Activity		01 Add or Create
02 Change
03 Display
DESTSYS
Logical System		*
DOMAIN
TMS: Transport Domain		*
TTYPE
Request Type (Change and Transport System)		PATC,PIEC


S_TRANSPRT
Transport Organizer
ACTVT
Activity

01 Add or Create
02 Change
03 Display

TTYPE
Request Type (Change and Transport System)		DTRA, PATC, PIEC, TASK, TRAN 


S_TRANSPRT
Transport Organizer
ACTVT
Activity

43 Release

TTYPE
Request Type (Change and Transport System)		TRAN 



Basis - Central Functions
S_OC_ROLE
SAPoffice: Office User Attribute
OFFADMI
Text field length 15: authorization check		*


ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity		16 Execute


3.0 Content of the /AVANTRA/CLIENT (ZAVANTRA_AUTOMATION_CLIENT) role transport



Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

/SYSLINK/MONXAN5

BAPI_XBP_JOB_JOBLOG_READ

BAPI_XBP_JOB_SPOOLLIST_READ_20

BAPI_XBP_JOB_STATUS_CHECK

BAPI_XMI_LOGOFF

BAPI_XMI_LOGON

BAPI_XML_LOGON

FINB_TR_CC_EXIT_ANALYZE

FINB_TR_CC_EXIT_ANALYZE_EXCL

MDG_TR_CC_EXIT_ANALYZE

MDG_TR_CC_EXIT_ANALYZE_EXCL

RFCPING

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP

RFC_READ_TABLE

RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


Cross-application Authorization Objects
S_TCODE
Transaction Code Check at Transaction Start
TCD
Transaction Code
SCC4


Basis: Administration
S_ADMI_FCD
System Authorizations
S_ADMI_FCD
System administration function

SP01 (Use of SP01 (all users))

SP0R (Spool request management (all users))

SPAD( Spool administration (all clients))

SPAM (Spool administration (cross-client job authorization))

SUM (Use Software Update Manager Tools)

T000 (Create new client)


S_BTCH_ADM
Background Processing: Background Administrator
    
BTCADMIN
Background Administrator ID		Y (Background Administrator Authorization)


S_BTCH_JOB
Background Processing: Operations on Background Jobs
JOBACTION
Job operations

RELE (Release Jobs (Released Automatically When Scheduled))

JOBGROUP
Summary of jobs for a group		*


S_BTCH_NAM
Background Processing: Background User Name
BTCUNAME
Background User Name for Authorization Check

*


S_CLNT_IMP
Data Import for Client Copy 
ACTVT
Activity

21 Transport

60 Import


S_CTS_ADMI
Administration Functions in Change and Transport System
CTS_ADMFCT
Administration Tasks for Change and Transport System
EPS2
TABL



S_CTS_SADM
System-Specific Administration (Transport)		CTS_ADMFCT
Administration Tasks for Change and Transport System		*
DESTSYS
Logical System		*
DOMAIN
TMS: Transport Domain		*



S_DATASET
Authorization for file access     		ACTVT
Activity		06 (Delete)
33 (Read)
34 (Write)
FILENAME
Physical file name		*
PROGRAM
Program Name with Search Help		/AVANTRA/CL_CLIENT_MAINTAIN===CP

CL_SCCR_Z_LOGGER==============CP

SAPLSCCB

SAPLSLOG

SAPLSTRF


S_SPO_ACT
Spool Actions		SPOACTION
Authorization field for spool acti		BASE (Visibility)
DISP (Display contents)
34 (Write)
SPOAUTH
Value for authorization check		*



S_SPO_DEV
Spool: Device authorizations
SPODEVICE
Spool: Long device names

*


S_SWITCH
Switch Settings in Switch Framework		ACTVT
Activity		03 (Display)
OBJNAME
Object Name		*
OBJTYPE
Object Type		SFBF


S_TABU_CLI
Cross-Client Table Maintenance
CLIIDMAINT
Indicator for cross-client mainten

'X' (Allowed: Maintenance of cross-client tables)


S_TABU_DIS
Table Maintenance (using standard tools such as SM30)  
ACTIVITY
Activity

02 (change)

DICBERCLS
Table authorization group		SS


S_TABU_NAM
Table Access by Generic Standard Tools
ACTVT
Activity
02 (Change)
03 (Display)
TABLE
Table name		T000
CCCFLOW


S_TC
Technical Configuration Task Lists
ACTIVITY
Activity

03 (Display)

STC_SCN
Task List		*


S_USR_AGR
Authorizations: Role Check
ACTVT
Activity
01 (Add or Create)
ACT_GROUP
Role Name
*


S_USR_GROUP
User Master Maintenance: User Groups 
ACTVT
Activity
01 (Add or Create)
CLASS
User group in user master maintenance
*


S_USR_PRO
User Master Maintenance: Authorization Profile 
ACTVT
Activity
01 (Add or Create)
PROFILE
Auth. profile in user master maintenance
*


S_XMI_PROD
Authorization for External Management Interfaces (XMI)
EXTCOMPANY
XMI logging: company name of external management tool		Avantra
SYSLINK
EXTPRODUCT
XMI logging: Program name of external management tool		Avantra Agent
lyceus
INTERFACE
Interface ID (for example, XBP)		XAL
XBP



Basis - Development Environment  
S_PROGRAM
ABAP: Program Flow Checks
P_ACTION
User Action in ABAP Program
SUBMIT (Execute ABAP program)
P_GROUP
ABAP Program Authorization Group		F_001
GBAS


Basis - Development Environment  
S_SYS_RWBO
System-Specific Authorization for
ACTVT
Activity
01 (Add or Create)
02 (Change)
DESTSYS
Logical System		*
DOMAIN
TMS: Transport Domain		*
TTYPE
Request Type (Change and Transport System)		PATC



Basis - Development Environment  
S_TRANSPRT
Transport Organizer
ACTVT
Activity
01 (Add or Create)
02 (Change)
TTYPE
Request Type (Change and Transport System)		CLCP, PATC


Basis - Central Functions 
ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity
16 (Execute)



4.0 Content of the /AVANTRA/SNOTE (ZAVANTRA_AUTOMATION_SNOTE) role transport


Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFCPING

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP


RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


Basis: Administration
S_DATASET
Authorization for file access     		ACTVT
Activity		All activities 
FILENAME
Physical file name		*
PROGRAM
Program Name with Search Help		SAPLSTRF


Basis - Development Environment  
S_DEVELOP
ABAP Workbench
ACTVT
Activity
All activities
DEVCLASS
Package		SBSPEXT_HTMLB
OBJNAME
Object Name		HTMLB_SAMPLES
OBJTYPE
Object Type		WAPA
P_GROUP
ABAP Program Authorization Group		*


S_TRANSPRT
Transport Organizer
ACTVT
Activity
01 (Add or Create)
02 (Change)
03 (Display)
05 (Lock)
06 (Delete)
23 (Maintain)
DEVCLASS
Package		SBSPEXT_HTMLB
OBJNAME
Object Name		HTMLB_SAMPLES
OBJTYPE
Object Type		WAPA
P_GROUP
ABAP Program Authorization Group		*



S_TRANSPRT
Transport Organizer
ACTVT
Activity
01 (Add or Create)
02 (Change)
03 (Display)
DEVCLASS
Package		SCWN
OBJNAME
Object Name		*
OBJTYPE
Object Type		PROG
P_GROUP
ABAP Program Authorization Group		*


Basis - Central Functions 
ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity
16 (Execute)




5.0 Content of the /AVANTRA/SPAMSAINT (ZAVANTRA_AUTOMATION_SPAMSAINT) role transport


Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTIVITY
Activity
16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object to which access is allowed		OCS*
RFCPING
RFC_METADATA_GET
RFC_METADATA_GET_TIMESTAMP
RFC_TYPE
Type of RFC object to which access		FUGR (Function group)
FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


S_TCODE
Transaction Code Check at Transaction Start
TCD
Transaction Code
SAINT, SPAM


Basis: Administration
S_ADMI_FCD
System Authorizations
S_ADMI_FCD
System administration function
SUM (Use Software Update Manager Tools)


S_BTCH_JOB
Background Processing: Operations
    
JOBACTION
Job operations		RELE (Release Jobs (Released Automatically When Scheduled))
JOBGROUP
Summary of jobs for a group		*


S_CTS_ADMI
Administration Functions in Change and Transport System
CTS_ADMFCT
Administration Tasks for Change and Transport System
EPS1, EPS2, IMPA, IMPS, IMPT, TADD, TADM


S_CTS_SADM
System-Specific Administration (Transport)
CTS_ADMFCT
Administration Tasks for Change and Transport System
EPS1, EPS2, IMPA, IMPS, IMPT, TADD, TADM, TDEL
DESTSYS
Logical System		*
DOMAIN
TMS: Transport Domain		*


S_C_FUNCT
C calls in ABAP programs
ACTIVITY
Activity
16 (Execute)
CFUNCNAME
Name of C Routine Callable Using CALL		SYSTEM
PROGRAM
Program Name with Search Help		SAPLOCS_FILEMGMT


S_DATASET
Authorization for file access     		ACTVT
Activity		06 (Delete)
33 (Read)
34 (Write)
FILENAME
Physical file name		*
PROGRAM
Program Name with Search Help		CL_OCS_BINARY_FILE============CP
CL_OCS_BINARY_FILE_WRITER=====CP
SAPLSLOG



Basis - Development Environment  
S_SYS_RWBO
System-Specific Authorization for Transport Organizer
ACTVT
Activity
01 (Add or Create)
02 (Change)
03 (Display)
DESTSYS
Logical System		*
DOMAIN
TMS: Transport Domain		*
TTYPE
Request Type (Change and Transport System)		PATC, PIEC


S_TRANSPRT
Transport Organizer
ACTVT
Activity
01 (Add or Create)
02 (Change)
03 (Display)
TTYPE
Request Type (Change and Transport System)		PATC, PIEC


S_TRANSPRT
Transport Organizer
ACTVT
Activity
43 (Release)
TTYPE
Request Type (Change and Transport System)		TRAN


Basis - Central Functions 
ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity
16 (Execute)



6.0 Content of the /AVANTRA/CERTIFICATE (ZAVANTRA_AUTOMATION_STRUST) role transport


Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

ICM_SSL_PSE_CHANGED

RFCPING

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP

RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


Basis: Administration  
S_DATASET
Authorization for file access     		ACTVT
Activity		06 (Delete)
33 (Read)
34 (Write)
FILENAME
Physical file name		*
PROGRAM
Program Name with Search Help		/AVANTRA/CL_CERTS_MAINTAIN====CP
SAPLSSFM
SAPLSSFR 


Basis - Central Functions 
ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity
16 (Execute)



7.0 Content of the /AVANTRA/SYSREFRESH (ZAVANTRA_AUTOMATION_SYSREFRESH) role transport



Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTIVITY
Activity
16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object to which access is allowed		/SYSLINK/MONXAN5
CTS_CFG_API_SETUP_DOMAIN

RFCPING

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP

TMW_TM_GET_HISTORY

TRINT_CLEAR_FOR_DBCOPY

RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


S_TCODE
Transaction Code Check at Transaction Start
TCD
Transaction Code
SICF 



Basis: Administration

S_BTCH_JOB
Background Processing: Operations
JOBACTION
Job operations		PLAN Copy or repeat jobs.
RELE Release Jobs (Released Automatically When Scheduled)
JOBGROUP
Summary of jobs for a group		*




S_SRT_CF_C
SOAP Runtime: Web Service Consumer
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_CF_P
SOAP Runtime: Web Service Provider
ACTVT
Activity		03 Display
06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_DEST
SOAP Runtime: SRT Destinations
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_LRD
SOAP Runtime: Logcal Receiver Dete
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_PROF
OAP Runtime Profile Administratio
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*


S_SRT_SCEN
SOAP Runtime: Web Scenario
ACTVT
Activity		06 Delete
SRT_TYPE
SRT Authorization Check Type		*


S_SRT_UACC
SOAP Runtime User Accounts
ACTVT
Activity		06 Delete
SRT_TYPE
SRT Authorization Check Type		*


S_SRT_UASG
SOAP Runtime: User Account Assignment
ACTVT
Activity

06 Delete

SRT_NAME
SRT Authorization Object Name		*
SRT_NAME2
SRT Authorization Object Name		*



Basis - Development Environment
S_DOKU_AUT
SE61 Documentation Maintenance Authorization  
DOKU_ACT
Editing Status		ACTIVATE (Activate end user documentation)
FINAL_VERS (End user documentation)
RAW_VERS (Raw documentation)
DOKU_DEVCL
Package for which documentation authorization is assigned		*
DOKU_MODE
Authorization to maintain, transla		MAINTAIN (Edit the master language documentation)
TRANSLATE (Translate)


Basis - Central Functions
S_IDOCDEFT
WFEDI: S_IDOCDEFT - Access to IDoc
ACTVT
Activity		All activities 
EDI_CIM
Extension		*
EDI_DOC
Basic type		*
EDI_TCD
Transaction code		WE30



Basis - Central Functions
S_OC_ROLE
SAPoffice: Office User Attribute
OFFADMI
Text field length 15: authorization check		*


ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity		16 Execute



Data Warehousing Workbench - Objects 
S_RS_ADMWB
Data Warehousing Workbench - Objec
ACTVT
Activity		All activities 
RSADMWBOBJ
Administrator Workbench object		All values


8.0 Content of the /AVANTRA/SYSREFRESH_BIZ_CLIENT role transport


Cross-application authorization objects
B_ALE_LSYS
ALE/EDI: Maintaining Logical Systems		LOGSYS
Logical System		*


Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTIVITY
Activity
16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object to which access is allowed		/SYSLINK/MONXAN2
/SYSLINK/MONXAN5

RFCPING

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP

RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


S_TCODE
Transaction Code Check at Transaction Start
TCD
Transaction Code
SA38 



Basis: Administration

S_BTCH_JOB
Background Processing: Operations
JOBACTION
Job operations		PLAN Copy or repeat jobs.
RELE Release Jobs (Released Automatically When Scheduled)
JOBGROUP
Summary of jobs for a group		*




S_SRT_CF_C
SOAP Runtime: Web Service Consumer
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_DEST
SOAP Runtime: SRT Destinations
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*



S_SRT_LRD
SOAP Runtime: Logcal Receiver Dete
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*


S_SRT_PROF
OAP Runtime Profile Administration
ACTVT
Activity		06 Delete
SRT_NAME
SRT Authorization Object Name		*


S_SRT_SCEN
SOAP Runtime: Web Scenario
ACTVT
Activity		06 Delete
SRT_TYPE
SRT Authorization Check Type		*


S_SRT_TYPE
SOAP Runtime User Accounts
ACTVT
Activity		01 Add or Create

02 Change

03 Display

06 Delete

SRT_TYPE
SRT Authorization Check Type		DT_CACHE Design Time Cache
GLOB.           Global Settings
TEMPLATE Configuration Templates



S_SRT_UACC
SOAP Runtime User Accounts
ACTVT
Activity		06 Delete
SRT_TYPE
SRT Authorization Check Type		*


S_SRT_UASG
SOAP Runtime: User Account Assignment
ACTVT
Activity

06 Delete

SRT_NAME
SRT Authorization Object Name		*
SRT_NAME2
SRT Authorization Object Name		*



S_SRT_UASG
SOAP Runtime: Web Service Special
ACTVT
Activity

01 Add or Create

02 Change

03 Display

06 Delete

SRT_TYPE
SRT Authorization Check Type


S_USER_GRP
User Master Maintenance: User Groups
ACTVT
Activity		05 Lock
CLASS
User group in user master maintenance		*



Basis - Development Environment
S_DEVELOP
ABAP Workbench
ACTVT
Activity		03 Display
DEVCLASS
Package		SOAP_CONFIG
OBJNAME
Object Name		SRT_WSP_CONFIG_FW_INIT
OBJTYPE
Object Type		FUGR
P_GROUP
ABAP Program Authorization Group		*



Basis - Central Functions
S_OC_ROLE
SAPoffice: Office User Attribute
OFFADMI
Text field length 15: authorization check		*


ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity		16 Execute



9.0 Content of the /AVANTRA/JOB (ZAVANTRA_AUTOMATION_JOB) role transport


Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTIVITY
Activity
16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object to which access is allowed		BAPI_XBP_EVENT_RAISE

BAPI_XBP_GET_FREE_SELECTIONS

BAPI_XBP_JOBLIST_STATUS_GET

BAPI_XBP_JOB_ADD_ABAP_STEP

BAPI_XBP_JOB_CLOSE

BAPI_XBP_JOB_DEFINITION_GET

BAPI_XBP_JOB_DELETE

BAPI_XBP_JOB_HEADER_MODIFY

BAPI_XBP_JOB_JOBLOG_READ

BAPI_XBP_JOB_OPEN

BAPI_XBP_JOB_READ

BAPI_XBP_JOB_SELECT

BAPI_XBP_JOB_SPOOLLIST_READ_20

BAPI_XBP_JOB_START_ASAP

BAPI_XBP_JOB_STATUS_CHECK

BAPI_XBP_JOB_STATUS_GET

BAPI_XBP_READ_SELSCREEN

BAPI_XMI_LOGOFF

BAPI_XMI_LOGON

BAPI_XML_LOGON

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP

RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)


Basis: Administration
S_ADMI_FCD
System Authorizations
S_ADMI_FCD
System administration function		SP01    Use of SP01 (all users)
SPOR  Spool request management (all users)



S_BTCH_ADM
Background Processing: Background
BTCADMIN
Background Administrator ID		Y (Background Administrator Authorization)



S_BTCH_JOB
Background Processing: Operations
JOBACTION
Job operations		RELE Release Jobs (Released Automatically When Scheduled)

JOBGROUP
Summary of jobs for a group		*


S_BTCH_NAM
Background Processing: Background User Name
BTCUNAME
Background User Name for Authorization Check		*



S_SPO_ACT
Spool Actions
SPOACTION
Authorization field for spool actions		BASE (Visibility)
DISP (Display contents)
SPOAUTH
Value for authorization check		*


S_XMI_PROD
Authorization for External Management Interfaces (XMI)
EXTCOMPANY
XMI logging: company name of external management tool		Avantra
SYSLINK
EXTPRODUCT
XMI logging: Program name of external management tool		Avantra Agent
lyceus
INTERFACE
Interface ID (for example, XBP)		XAL
XBP


10.0 Content of the /AVANTRA/USER (ZAVANTRA_AUTOMATION_USER) role transport


Cross-application Authorization Objects
S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

/SYSLINK/MONXAN5

BAPI_USER_ACTGROUPS_ASSIGN

BAPI_USER_CHANGE

BAPI_USER_CREATE1

BAPI_USER_DELETE

BAPI_USER_GET_DETAIL

BAPI_USER_LOCACTGROUPS_ASSIGN

BAPI_USER_LOCACTGROUPS_READ

BAPI_USER_LOCK

BAPI_USER_UNLOCK

PRGN_AUTO_GENERATE_PROFILE_NEW

RFCPING

RFC_METADATA_GET

RFC_METADATA_GET_TIMESTAMP

RFC_READ_TABLE

RFC_TYPE
Type of RFC object to which access		FUNC (Function Module)


S_RFC
Authorization Check for RFC Access
ACTVT
Activity		16 (Execute)
RFC_NAME
Name (Whitelist) of RFC object

RFC_METADATA

SYST

RFC_TYPE
Type of RFC object to which access		FUGR (Function group)



Basis: Administration  
S_USER_AGR
Authorizations: Role Check		ACTVT
Activity		02 (Change)
64 (Generate)
ACT_GROUP
Role Name		*



S_TABU_NAM
Table Access by Generic Standard T
ACTVT
Activity

03 (Display)

TABLE
Table name		AGR_AGRS, AGR_USERS, USR02



S_USER_AGR
Authorizations: Role Check
ACTVT
Activity

02 (Change)

64 (Generate)

ACT_GROUP
Role name		*



S_USER_GRP
User Master Maintenance: User Groups
ACTVT
Activity

01 (Add or Create)

02 (Change)

03 (Display)

05 (Lock)

06 (Delete)

CLASS
User group in user master maintenance		*



S_USER_SAS
User Master Maintenance: System-Specific Assignments
ACTVT
Activity		22 (Enter, Include, Assign)
ACT_GROUP
Role Name

*

CLASS
User group in user master maintenance		*
PROFILE
Auth. profile in user master maintenance		*
SUBSYSTEM
Receiving system for central user administration		*


Basis - Central Functions 
ZSYSXANMON
Avantra Monitoring Interface
ACTVT
Activity
16 (Execute)




11.0 Content of the /AVANTRA/SOLMAN (ZAVANTRA_SOLMAN) role transport


For solution manager only! This role contains ADDITIONAL solman specific roles required for solution manager.

Note: This role must be used in combination with the Avantra monitoring role. 



Basis: Administration
S_BTCH_JOB
Background Processing: Operations
JOBACTION
Job operations		DELE    Delete Background Jobs
RELE    Release Jobs (Released Automatically When Scheduled)
JOBGROUP
Summary of jobs for a group		*




Solution Manager 
AI_LMDB_OB
Authorization Object for LMDB Objects
ACTVT
Activity		03    Display
LMDB_DOMA
CIM Domain		LDB
LMDB_NAMES
Namespace Hash for Authorization 		ACTIVE
LMDB_MTYPE
Main Entity Type		TECSYST
LMDB_STYPE
Sub-Entity Type               		*
LMDB_OBJID
Object ID of LMDB Objects for		*