Creating SAP User Role CELONIS_AUTOMATION
Celonis provides a ready-to-use user role that can be imported into SAP.
This user role contains the permissions necessary to get started with the simple & advanced SAP Action.
Overview
Permissions included in CELONIS_AUTOMATION user role
Like the Extractor setup, Celonis provides a ready-to-use user role that can be imported into SAP for Automation.
The user role CELONIS_AUTOMATION has permission to use the following BAPIs & RFC calls:
Object | Field | Activities/Values |
|---|---|---|
S_RFC | ACTVT | 16 |
S_RFC | RFC_NAME | BAPI_TRANSACTION_COMMIT, BAPI_TRANSACTION_ROLLBACK, FUNCTION_IMPORT_INTERFACE, RFCPING, RFC_FUNCTION_SEARCH, RFC_GET_STRUCTURE_DEFINITION, RFC_GET_FUNCTION_INTERFACE, RFC_PING, DDIF_FIELDINFO_GET |
S_RFC | RFC_TYPE | FUNC |
Object | Field | Activities/Values |
|---|---|---|
S_RFC | ACTVT | 16 |
S_RFC | RFC_NAME | RFC1, SYST, /CELONIS |
S_RFC | RFC_TYPE | FUGR |
→ Depending on your use case it might be necessary to manually add permissions for additional BAPIs or RFC calls in addition to the ones included in the user role.
Use case examples:
If you would like your users to be able to change a purchase order, you will have to add permissions for BAPI_PO_CHANGE.
To post a goods movement document for an order that has been delivered by the vendor, you will need to add permissions for BAPI_GOODSMVT_CREATE.
Download - SAP User Role CELONIS_AUTOMATION
The SAP user role "CELONIS_AUTOMATION" can be downloaded here. Please engage your SAP admin to import the user role in your SAP instance.
Minimal set of recommended permissions
Instead of importing the user role, it is also possible to create the corresponding role manually or add the required permissions to an existing role. The following minimal set of permissions is required (or at least recommended) for using Celonis Agent. Please note as mentioned above that depending on your use case it might be necessary to manually add permissions for additional BAPIs or RFC calls in addition to the ones included here.
For SAP release 7.10 or newer:
Object | Field | Activities/Values |
|---|---|---|
S_RFC | ACTVT | 16 |
S_RFC | RFC_NAME | BAPI_TRANSACTION_COMMIT, BAPI_TRANSACTION_ROLLBACK, FUNCTION_IMPORT_INTERFACE, RFCPING, RFC_FUNCTION_SEARCH, RFC_GET_STRUCTURE_DEFINITION, RFC_GET_FUNCTION_INTERFACE, RFC_PING, DDIF_FIELDINFO_GET |
S_RFC | RFC_TYPE | FUNC |
Detailed explanation of used Function Modules
FUNC | Purpose |
BAPI_TRANSACTION_COMMIT | Execute external Commit when using BAPIs |
BAPI_TRANSACTION_ROLLBACK | Execute external Rollback when using BAPIs |
FUNCTION_IMPORT_INTERFACE | Providing Interface of a Function Module |
RFCPING, RFC_PING | Pinging the RFC destination from the Agent |
RFC_FUNCTION_SEARCH | Searching remote callable function modules |
RFC_GET_STRUCTURE_DEFINITION | RFC: Fields of a table or structure, information required for ABAP |
RFC_GET_FUNCTION_INTERFACE | RFC: Interface of a function module |
DDIF_FIELDINFO_GET | DD: Interface for Reading Text on Tables or Types |
For older SAP releases, permissions have to be granted on FUGR level, requiring:
Object | Field | Activities/Values |
|---|---|---|
S_RFC | ACTVT | 16 |
S_RFC | RFC_NAME | RFC1, SYST |
S_RFC | RFC_TYPE | FUGR |