Skip to main content

SAP Monitoring requirements

User Profile ITOUSER in SAP​

Authorization ObjectFieldValueDescriptionApplication that uses it
S_RFCRFC_TYPE*Executes all function modules in SAP.CHK
S_RFCRFC_NAME*Executes all function modules in SAP.CHK
S_TABU_DISACTVT03 (display)Can query all tables in SAP.CHK
S_TABU_DISDICBERCLS*Can query all tables in SAP.CHK
S_XMI_PRODEXTCOMPANY*Executes the XAL interface (BAPIs).CHK
S_XMI_PRODEXTPRODUCT*Executes the XAL interface (BAPIs).CHK
S_XMI_PRODINTERFACE*Executes the XAL interface (BAPIs).CHK
/SDF/E2EACTVT03 (display)Can query SAP diagnostic functions.CHK
S_DX_MAINTCD*Read files from the application server.AVA
S_DX_MAINACTVT03 (display), 36 (extended maintenance)Read files from the application server.AVA
S_RZL_ADMACTVT03 (display)Read SAP system profile parameters.AVA, SEG
S_USER_GRPCLASS*Read users (for security checklist).SEG
S_USER_GRPACTVT03 (display)Read users (for security checklist).SEG
S_DATASETCTVT33Read files from the application server.AVA
S_DATASETFILENAME*Read files from the application server.AVA
S_DATASETPROGRAMSAPLDX_FILERead files from the application server.AVA

This must be edited in the user role ITOUSER in the Development environment and transported to Production.