CHARM Roles in Satellite System

[Former Member]

Hi,

Can anybody tell me exactly on CHARM roles in Solman 7.0 EHP1.

I am totally confused which roles i have to assign to Change Manager, IT operator, Tester, Developer & Requester.

In Solman which roles I have to assign & in Satellite system R/3 which roles to assign.

Currently I have assigned following Roles in Solman.

Change Manager

ZO_BC_SOCM_CHANGE_MANAGER

ZO_BC_CHANGEMAN_ADMIN

ZO_BC_CHANGEMAN_OPERATOR

ZO_BC_SOCM_CREATE

ZO_BC_SOCM_DISPLAY

ZO_BC_SOCM_PRODUCTION_MANAGER

ZO_BC_TRUSTED-RFC

IT Operator /Basis

ZO_BC_SOCM_IT_OPERATOR

ZO_BC_TRANSPORT

ZO_BC_SOCM_ADMIN

ZO_BC_CM_SMAN_ADMINISTRATOR

ZO_BC_TRUSTED-RFC

Developer

ZO_BC_SOCM_DEVELOPER

ZO_BC_CM_SMAN_DEVELOPER

ZO_BC_TRUSTED-RFC

Tester

ZO_BC_SOCM_TESTER

ZO_BC_TRUSTED-RFC

Can anybody tell whether above assignment is correct.

In Satellite system which roles I need to assign.

Regards

PK

Edited by: PK on Jun 1, 2010 9:58 AM

Edited by: PK on Jun 1, 2010 9:59 AM

[Former Member]

You have to assign these roles to the active client(eg client 200) in solution manager.

Regards,

Akhilesh Barthwal.

[Former Member]

Roles required for developer, tester and chagne manager in Solution manager in solution manager are as follow.

Developer

SAP_CM_DEVELOPER_COMP(composite role)

SAP_CM_SMAN_DEVELOPER

SAP_SOCM_DEVELOPER

SAP_SOCM_REQUESTER

tester

SAP_S_RFCACL (for RFC)

SAP_CM_TESTER_COMP(composite role)

SAP_CM_SMAN_TESTER

SAP_SOCM_TESTER

change manager

SAP_CM_ADMINISTRATOR_COMP (composite role)

SAP_CM_SMAN_ADMINISTRATOR

SAP_CPR_PROJECT_ADMINISTRATOR

SAP_CPR_USER

SAP_SOCM_ADMIN

SAP_CM_CHANGE_MANAGER_COMP (composite role)

SAP_CM_SMAN_CHANGE_MANAGER

SAP_SOCM_CHANGE_MANAGER

But you have to assign some object authorization to these standard roles.

mainly you have to provide authorization for these objects S_TCODE, B_USERSTAT, S_OC_ROLE, CRM_ORD_OP etc.

You can assign sap_all, sap_new to your user(developer, tester, change manager etc) and can set a trace from st01 on that perticaular user and then try to execute anything which you want. Then you can check for the objects in the trace and can authorize user for those object.

Regards,

[Former Member]

Hi Akhilesh,

The for Developer where I need to assign the roles

1) in Solman which client(000 or active client) or

2) R/3 development (000 or active client)

Regards

PK

[fernando_rocha1]

Hi PK,

Please take a look:

Security Guide SAP Solution Manager 7.0 EHP 1

6.4.17 End-User Roles for Change Request Management . . . . . . . . . . 101

https://websmp106.sap-ag.de/~sapidb/011000358700000370562009E/SM_SECURITY_SPS23.pdf

Best Regards,

Fernando