Security and Authorization

The restriction of certain activities within ActiveDiscover is imperative to prevent misuse, proliferation of landscapes, and to properly manage the housekeeping of data.

Roles

The roles delivered with the ActiveDiscover transports are:

• /BTI/PX_ADMINISTRATOR: Administrator role, access to do everything.
• /BTI/PX_DISPLAY: Display only, cannot run any analyses.
• /BTI/PX_ANALYSIS_CONTROL: Can create, run, and abort analysis runs (+display).
• /BTI/PX_TI_ALL: Access to Transformation Insight.
• /BTI/PX_RFC: Technical RFC role for RFC users in Source and Target systems.
• /BTR/DIF:EXPERT: All access to Diffuser related transactions.
  

You may reuse these roles as a reference if your internal policy requires.

These roles should be assigned as follows:

Central System only

• /BTI/PX_ADMINISTRATOR: Assign to all administrators.
• /BTI/PX_DISPLAY: Assign to users who only require display access.
• /BTI/PX_ANALYSIS_CONTROL: Assign to general users.
• /BTI/PX_TI_ALL: Assign to users who need to access Transformation Insight.

Source Systems only

• /BTR/DIF:EXPERT: Assign to the user(s) performing the Diffuser setup in the Source Systems.
  

Source and Target Systems

• /BTI/PX_RFC: Assign to RFC users.