Creating Individual Users

Use

You require roles for two different types of individual users:

?      Synchronization users

This role is required by all users who want to synchronize their mobile devices with the server.

?      Administrator users

This role is required by all administrators. As administration tasks are also carried out in the SAP NetWeaver Administrator, the user requires additional Java authorizations (see Setting Up Administrator Users).

Creating the Role for the Individual Synchronization User

Check whether the role for the user exists. If not, define one:

...

       1.      Create an authorization profile without a template and add the following authorization objects to it.

Authorizations for the Individual Synchronization User

Authorization Object

Field

Value

S_ME_SYNC

ACTVT

38 (Synchronization)

S_RFC

ACTVT

16

RFC_NAME

SUSO (Detailed error message determination)

ME_USER (Synchronization)

BWAF_MW (Synchronization)

BWAF_MOMO (Synchronization)

SYST

SRFC

SG00

SDIFRUNTIME

RFC1

       2.      Generate the profile and save the role you created.

Creating the Role for the Administrator

Check whether the role for the user exists. If not, define one:

...

       1.      Create an authorization profile without a template and add the following authorization objects to it.

Authorizations for the Individual Administrator

Authorization Object

Field

Value

S_ME_SYNC

ACTVT

38

S_RFC

ACTVT

16

RFC_NAME

SUSO (Detailed error message determination)

ME_USER (Synchronization)

BWAF_MW (Synchronization)

BWAF_MOMO (Synchronization)

RFC1 (Java Connector)

SDIFRUNTIME (Java Connector)

SYST (Java Connector)

SYSU (Java Connector)

SG00 (Java Connector)

SRFC (Java Connector)

MEREP_INSTTK_MPC (Creation of setup packages)

MEREP_JAVACLIENT (Uploading SyncBO definitions from the back-end system)

MEMGMT* (Mobile Administrator)

ME_CENTRAL_TRACING (Tracing)

S_TCODE

TCD

SMOMO (Mobile Administrator)

MEREP* (Smart Synchronization administration)

MI_MCD (MCD maintenance)

MCD (MCD maintenance)

DEVICE_CONFIG (Device configuration)

S_MI_MGMT

ACTVT

*(Device administration and device configuration)

MI_GROUP

Stored in the table MEMGMT_AUTH_GRP, transaction MGMT_AUTHORITY (for the definition of groups with different authorizations, for example, ADMIN and SUPPORT)

S_MI_CCMS

ACTVT

* (Customizing alerts and display of alerts using the alert monitor)

S_MI_ALERT

ACTVT

36 (Customizing alerts)

S_DATASET

ACTVT

34 (Storing alerts on the server)

       2.      Generate the profile and save the role you created.

Assigning Roles

...

       1.      Start the transaction SU01 and create the required users or search for existing users.

For the password, only use the characters contained in the ISO 8859-1 character set.

       2.      Assign the required roles to the users.

See also:

Role Editing

Creating Service Users