Authorisations for Background Processing for SAP by Bob Panic:

Authorisations for accessing background processing jobs can be set up for two types of users:

Administrators and
End Users

A users jobs are defined and run in the users current logon client, regardless of whether the users
background processing authorisations are set for user or for administrator.

Setting Up Authorisations

Administrator authorisation setup requires the following authorisation objects:

Authorisation Object Value

S_BTCH_ADM (Batch Processing: Batch Administrator) Y
Allows all of the activities listed above except for maintaining external command
definitions.
No default profile with ONLY this authorisation is currently shipped with SAP, but the
standard SAP_ALL profile contains this Authorisation.
S_RZL_ADM (CC Control Center: System Administration) 01
Allows an administrator to maintain external command definitions and to trigger
commands from the external command function (Transactions SM49 and SM69).
S_BTCH_JOB (Batch Processing: Operations on Batch Jobs) LIST
Allows an administrator to view job-generated spool requests.
To protect sensitive data, this Authorisation is not included in the standard administrator
Authorisation.
S_DEVELOP (ABAP Workbench)
Allows an administrator to capture and debug background jobs by providing access to
ABAP debugging tools

User authorisation setup beyond job scheduling and status checking requires the following
authorisation objects:

Authorisation Object Value(s)

S_BTCH_JOB (Batch Processing: Operations on Batch DELE (delete other users jobs)
Jobs) LIST (display spool requests)
Allows all of the activities listed above except for PLAN (copy other users jobs)
maintaining external command definitions.
PROT (display anyones job log)
No default profile with ONLY this Authorisation is
SHOW (display job details)
currently shipped with SAP, but the standard SAP_ALL
profile contains this Authorisation. RELE (release other users jobs to start; a
users own jobs are automatically released
when scheduled.)
S_BTCH_NAM (Batch Processing: Batch User) permissible users
Allows a user to specify other users for runtime
Authorisation for a job.
 S_LOG_COM (Authorisation to Execute Logical
Operating System Commands)
Allows a user to run external commands.
S_ADMI_FCD (System Authorisations)
For special functions, such as debugging active jobs.

For complete information, see authorisation object documentation from Transaction SU21.

Prepared by Bob Panic for www.knowsap.com

Business Systems and Technical Solutions Architect
+61 424 102 603 24x7x365 global consultancy service
bobpanic@outlook.com
https://www.linkedin.com/pub/bob-panic/6/185/62a