KBI 310238 Argent for SAP Minimum User Roles and Profiles
Version
Argent for SAP – All Versions
Date
1 Nov 2014
Summary
This KBI discusses the minimum user requirements when connecting to an SAP instance for monitoring purposes.
Technical Background
The absolute minimum requirements for a SAP user in Argent for SAP are:
Roles:
None needed
Profiles:
Create a profile with the following two authorizations:
* Cross-Application Authorization Objects –> S_RFC
Authorization : S_RFC_CUSCMP
Without this, customers cannot logon to SAP using Argent for SAP.
RFC stands for “Remote Function Call”, which is a procedure for data interchange between a client and a server.
“The authorization S_RFC and the authorization object S_RFC_CUSCMP check that the field RFC_NAME contains overall authorization.”
http://help.sap.com/saphelp_nw70ehp3/helpdata/en/48/8d1bd1ae444e6ee10000000a421937/frameset.htm
* Basis: Administration –> S_XMI_PROD
Authorization : S_XMI_ADMIN
Without this, customers will receive a “Could not logon to XAL interface” error when trying to retrieve CCMS counters
XMI is the external management interface, and XAL is the “Extensible Application Language” for system monitoring and alerting.
These credentials have been tested with Argent for SAP Relators in production mode, against all Rules that logon to SAP or CCMS.
All tests were conducted successfully, with valid data being retrieved, just by using these two levels of authorization.
Example Profile Setup
Example User Setup — Roles (None)
Example User Setup — Profiles (Pointing to newly created profile)
Resolution
N/A