Restrict user to relase particular job

[Former Member]

Hi,

Is there any way to restrict user to release particular job (SM37).

e.g. User A should be able to release only job - Z00001.

Any enhacment/BADI available?

Thanks.

[Former Member]

This message was moderated.

[Former Member]

If you can assign the job to a job group, you can restrict the authorizations with object S_BTCH_JOB

Background processing: Operations on background jobs consists of the following fields:

• Functions:  Operations the user is allowed to perform.
• Possible values are:
  • DELE: Delete background jobs of other users.
  • LIST: Display spool requests created by jobs of other users.
  • Note: To guarantee the security of confidential data in spool requests via spool output control, you must protect confidential spool requests via the spool authorization field. A user with the
  • System functionsSP01
  • authorization may display all spool requests.
  • PROT: Display processing logs created by the jobs of other users.
  • RELE: Release own jobs automatically during scheduling.
  • SHOW: Display definition (start/output specifications, steps) and details of a job scheduled by another user.
• Job group: Names of permitted job groups. Reserved: Set to *.

Maybe this is a suitable solution?

[Naveen01]

Hi Kumar,

I addition to above, please ensure S_BTCH_ADM is not equal to Y, as will overrides S_BTCH_JOB restrictions!!

BR,

Naveen

[magexposito]

Hello Kumar,

Take a look to the S_PROGRAM authorization object in this URL:

http://help.sap.com/saphelp_40b/helpdata/en/1a/174b6e5733d1118b3f0060b03ca329/content.htm

You can use this authorization object in order to restrict the program that the user can release as a background job. For example, if your job is named as Z00001 and the program which is executed in the step of the job is called as Z00001 you can use the following values for the authorization object:

P_ACTION = BTCSUBMIT (allows to schedule the program as a background job).

P_GROUP = Z00001

Best regards.