Central Monitoring with CCMS

SAP’s CCMS monitoring infrastructure, part of any SAP NetWeaver installation, lets you centrally monitor any IT environments – from individual systems through networked SAP solutions to complex IT landscapes incorporating several hundred systems. It can be used immediately after installation. You can easily extend the infrastructure to include SAP and non-SAP components.

Defining  CCMS Communication Users

Users with particular, restricted authorizations are required in all ABAP systems in your system landscape for communication between the central monitoring system (CEN), the monitored systems, and CCMS agents. RFC calls are triggered from CEN to monitored ABAP systems to pull monitoring data. If agents are used in monitored ABAP systems, data is pushed to the central system. Data from non-ABAB systems and non-SAP components is exclusively pushed to CEN by local agents. Agents require a communication user in CEN to be able to log on to it.

SAP recommends that you create and use the user CSMREG for this purpose in all relevant components. This user must be assigned the role SAP_BC_CSMREG. The user CSMREG is also used to register The CCMS System Component (SCR) with a central repository.

For more details on the CSMREG user and its authorizations, see Creating the CSMREG User.

For more information on users, see User Types.

Roles Used in Central Monitoring

The following predefined user roles are available for displaying, setting up and performing central monitoring functions and for communication:

·        SAP_BC_BASIS_MONITORING

This role contains authorizations for displaying data for the central monitoring of an SAP system landscape using the CCMS monitoring infrastructure.
Various SAP tools are used to do this (SMxx, RZxx, and STxx transaction codes).

·        SAP_BC_BASIS_ADMIN

This role contains all authorizations for setting up and performing the central monitoring of an SAP system landscape using the CCMS monitoring infrastructure.
Various SAP tools are used to do this  (SMxx, RZxx, and STxx transaction codes).

·        SAP_BC_CSMREG

This role must be assigned to a communication user required by agents reporting to the central monitoring system. It provides specific, greatly restricted logon authorizations for CCMS agents  in the central monitoring system.

For more information, see the documentation Monitoring in the CCMS.

Authorizations Used in Central Monitoring

The role SAP_BC_BASIS_MONITORING contains the following authorizations:

Authorization Object

Field

Value

S_RFC

RFC_FUGR

FUGR

RFC_NAME

SALC, SALF, SALF, SALH, SALP, SALS, SAL_CACHE_RECEIVE, SYST, SCSM*, SCCMSBI_UTIL_FUNCTIONS, RFC1, SPIS, SU53, SU56

ACTVT

16

S_SPI_AUTH

ACTVT

03

S_TCODE

AL08, AL11, OS07, RSPFPAR, RZ10, RZ20, RZ21, SICF, SM12, SM13, SM21, SICF, SM51, SM58, SM66, SMGW, SMICM, SMMS, ST02, ST03G, ST04, ST05, ST07, ST10, ST11, STAD, STATTRACE, TU02

S_CCM_RECV

ACTVT

P0, P1, P2

TABLE

*

S_ADMI_FCD

S_ADMI_FCD

NADM, PADM, SM21, ST0M, ST0R

S_BTCH_JOB

JOBACTION

RELE

JOBGROUP

*

S_CCMS_CMC

ACTVT

03

CMCAREA

BASIS

CMCFUNC

APPSERV, CONFIG, HOST, SPIPROC, SYSTEM, WORKLOAD

S_CTS_ADMI

S_C_FUNCT

ACTVT

16

CFUNCNAME

*

PROGRAM

*

S_DATASET

ACTVT

33, A6

FILENAME

*dev_*

PROGRAM

*

S_ENQUE

S_ENQ_ACT

*

S_RZL_ADM

ACTVT

03

S_TOOLS_EX

AUTH

S_TRANSLAT

ACTVT

TLANGUAGE

TRANSOBJ

S_ALV_LAYO

ACTVT

23

Authorizations Used in Central Monitoring

The role SAP_BC_BASIS_ADMIN contains the following authorizations:

Authorization Object

Field

Value

S_ICFREC

ACTVT

02, 03, 06, 16, 63, 70, D1, DL, UL

CLIENT

*

SYSTEM

*

USER

*

ACTVT

16

S_SPI_AUTH

ACTVT

03, 23

APPL_GROUP

*

S_TCODE

AL11, OS07, RZ03, RZ04, RZ10, RZ20, RZ21, SICF, SM01, SM02, SM04, SM12, SM13, SM21, SM21, SM28, SM35, SICFRECORDER, SM51, SM56, SM58, SM66, SMGW, SMGW, SMLG, SNL1, LST01, ST02, ST03, ST03N, ST03G, ST04, ST05, ST07, ST10, ST11, ST22, STAT, STAD, TU02, USMM

S_CCM_RECV

ACTVT

P0, P1, P2

TABLE

*

S_ADMI_FCD

S_ADMI_FCD

*

S_BTCH_JOB

JOBACTION

RELE

JOBGROUP

*

S_CCMS_CMC

ACTVT

02, 03

CMCAREA

BASIS

CMCFUNC

APPSERV, CONFIG, HOST, DATABASE, SPIPROC, SYSTEM, WORKLOAD

S_CTS_ADMI

CTS_ADMFCT

*

S_DCC

SDCC_DEV

*

SDCC_RUN

S_DATASET

ACTVT

*

FILENAME

*

PROGRAM

*

S_ENQUE

S_ENQ_ACT

*

S_RZL_ADM

ACTVT

*

S_TOOLS_EX

AUTH

*

S_USER_GRP

ACTVT

*

CLASS

*

S_TRANSLAT

ACTVT

*

TLANGUAGE

*

TRANSOBJ

*

S_ALV_LAYO

ACTVT

*