Required permissions

To use SAP OData as a source in a Qlik Replicate task, the following authorizations are required.

OData user authorizations

To use a single SAP Gateway framework or application services, the user role needs to have the corresponding authorizations. The proposals can be found in transaction SU22.

In the SAP Gateway hub system, the repository objects are R3TR IWSG and R3TR IWOM.

In the SAP Business Suite backend system, all authorizations are collected in the repository object R3TR IWSV.

In addition to the authorizations maintained in the SU22 proposal, the role needs to have the authorization object S_SERVICE assigned with the following specifications. This is a service allowing exploration of the framework or application services exposed by the SAP Gateway framework.

For more information, see Roles in the SAP Gateway Landscape.

To add OData services to the role:

1. Call transaction PFCG and create a single role.
2. Assign the authorization defaults of SAP Gateway Business Suite Enablement - Service: as follows:

   1. On the Menu tab, select Authorization Default from the Transaction menu.

      A new window opens.

   2. From the Authorization Default drop-down list, select SAP Gateway: Service Groups Metadata (R3TR IWSG).

   3. In TADIR Service, assign the following services required for catalog read:

      /IWFND/SG_MED_CATALOG_0001

      /IWFND/SG_MED_CATALOG_0002

   4. Add the required OData service(s) metadata. Specify the service name with ‘*’ at the end to find the service with a version number. Click Copy.

   5. From the Authorization Default drop-down list, select SAP Gateway Business Suite Enablement – Service (R3TR IWSV).

   6. In TADIR Service, select and assign the required service(s). Specify the service name with ‘*’ at the end to find the service with a version number. Click Copy.

   7. Verify the result.

      Each service should now have two entries:

      R3TR IWSG (for service metadata)

      R3TR IWSV (for the service itself)

      The catalog should include the following entries:

      /IWFND/SG_MED_CATALOG_0001

      /IWFND/SG_MED_CATALOG_0002

3. Save the settings and then generate an authorization profile.
4. Assign the role to the communication user for Replicate.

Data objects

Other