Skip to main content

Celonis Product Documentation

Creating SAP User Role CELONIS_AUTOMATION

Celonis provides a ready-to-use user role that can be imported into SAP.

This user role contains the permissions necessary to get started with the simple & advanced SAP Action.

Overview
Permissions included in CELONIS_AUTOMATION user role

Like the Extractor setup, Celonis provides a ready-to-use user role that can be imported into SAP for Automation.

The user role CELONIS_AUTOMATION has permission to use the following BAPIs & RFC calls:

Object

Field

Activities/Values

S_RFC

ACTVT

16

S_RFC

RFC_NAME

BAPI_TRANSACTION_COMMIT, BAPI_TRANSACTION_ROLLBACK, FUNCTION_IMPORT_INTERFACE, RFCPING, RFC_FUNCTION_SEARCH, RFC_GET_STRUCTURE_DEFINITION, RFC_GET_FUNCTION_INTERFACE, RFC_PING, DDIF_FIELDINFO_GET

S_RFC

RFC_TYPE

FUNC

Object

Field

Activities/Values

S_RFC

ACTVT

16

S_RFC

RFC_NAME

RFC1, SYST, /CELONIS

S_RFC

RFC_TYPE

FUGR

→ Depending on your use case it might be necessary to manually add permissions for additional BAPIs or RFC calls in addition to the ones included in the user role.

Use case examples:

  • If you would like your users to be able to change a purchase order, you will have to add permissions for BAPI_PO_CHANGE.

  • To post a goods movement document for an order that has been delivered by the vendor, you will need to add permissions for BAPI_GOODSMVT_CREATE.

Download - SAP User Role CELONIS_AUTOMATION

The SAP user role "CELONIS_AUTOMATION" can be downloaded here. Please engage your SAP admin to import the user role in your SAP instance.

Minimal set of recommended permissions

Instead of importing the user role, it is also possible to create the corresponding role manually or add the required permissions to an existing role. The following minimal set of permissions is required (or at least recommended) for using Celonis Agent. Please note as mentioned above that depending on your use case it might be necessary to manually add permissions for additional BAPIs or RFC calls in addition to the ones included here.

For SAP release 7.10 or newer:

Object

Field

Activities/Values

S_RFC

ACTVT

16

S_RFC

RFC_NAME

BAPI_TRANSACTION_COMMIT, BAPI_TRANSACTION_ROLLBACK, FUNCTION_IMPORT_INTERFACE, RFCPING, RFC_FUNCTION_SEARCH, RFC_GET_STRUCTURE_DEFINITION, RFC_GET_FUNCTION_INTERFACE, RFC_PING, DDIF_FIELDINFO_GET

S_RFC

RFC_TYPE

FUNC

Detailed explanation of used Function Modules

FUNC

Purpose

BAPI_TRANSACTION_COMMIT

Execute external Commit when using BAPIs

BAPI_TRANSACTION_ROLLBACK

Execute external Rollback when using BAPIs

FUNCTION_IMPORT_INTERFACE

Providing Interface of a Function Module

RFCPING, RFC_PING

Pinging the RFC destination from the Agent

RFC_FUNCTION_SEARCH

Searching remote callable function modules

RFC_GET_STRUCTURE_DEFINITION

RFC: Fields of a table or structure, information required for ABAP

RFC_GET_FUNCTION_INTERFACE

RFC: Interface of a function module

DDIF_FIELDINFO_GET

DD: Interface for Reading Text on Tables or Types

For older SAP releases, permissions have to be granted on FUGR level, requiring:

Object

Field

Activities/Values

S_RFC

ACTVT

16

S_RFC

RFC_NAME

RFC1, SYST

S_RFC

RFC_TYPE

FUGR