SAP System

______________________________________________________________

RE RSUSR_DBMS_USERS
____________________________________________________
Short Text
DBMS user: Mass processing

Purpose
To simplify user management of the database management system (DBMS), you can create a
connection between the user management of SAP NetWeaver Application Server (SAP
NetWeaver AS) ABAP and the DBMS. This program enables mass operations on DBMS users.
The program supports the following functions:
o Create and map DBMS users to the corresponding ABAP users
o Remove mappings of DBMS users to the corresponding ABAP users
o Assign DBMS roles to DBMS users
o Remove DBMS roles from DBMS users

Prerequisites
o You have customized SAP NetWeaver AS ABAP to use DBMS user management. If the
DBMS tab appears in User Maintenance (transaction SU01) then the customizing has
already be done. Otherwise follow the instructions in the documentation on SAP Help
Portal
(http://help.sap.com/saphelp_nw74/helpdata/en/10/f6a4fe4e44439eb60b237f5f651f
a1/frameset.htm).
o You have the required authorizations. This report checks the authorization object
S_USER_GRP for the activity 02 for editing and 03 for display.

Features
You can run the program in batch or dialog mode.
In batch mode you enter the options for user and role selection, choose a function and start the
report.
In dialog mode you enter the options for user and role selection and choose the Display users
function. The program shows a list of the selected users. From this list you can do a line
selection and execute the functions that the toolbar offers. The toolbar functions correspond to
the functions of the Select Functions area on the Selection screen. By default, the program only
shows error messages that result from the execution in the message column. If there is more
than one message, the More column contains the number of additional messages. Double-click
the message column to display all messages in a separate window. Clear the Show only error
messages option to show success messages as well.

______________________________________________________________
SAP AG 1
 SAP System
______________________________________________________________

To show the detailed role assignment of a single user, double-click the ABAP user ID. The
system displays the user in User Maintenance (transasction SU01). View the current DBMS role
assignments on the DBMS tab.
Create and Map DBMS Users to the Corresponding ABAP users
For each selected ABAP user, the function tries to create a DBMS user in the database.
If successful, the system establishes a mapping between both ABAP and DBMS users. If the
DBMS user already exists then this user is used for the mapping. The function uses the ABAP
user ID for the DBMS user ID by default. You can override the user ID in a custom BAdI
implementation. The restrictions on allowable user IDs for the DBMS and ABAP can be
different. Use the BAdI to create a valid DBMS user ID for the connected database system.
For example, a user ID for SAP HANA DB can only contain uppercase letters (A-Z), numbers
(0-9), and the underscore (_). In addition the user ID must begin with a letter.
The name of the BAdI definition is BADI_DBMS_USERNAME_MAPPING. This BAdI belongs to
the enhancement spot ENH_DBMS_USERNAME_MAPPING of package
SUSR_IDENTITY_DBMS. The interface of the BAdI contains one method,
GET_DBMS_USERNAMES, which implements the mapping of ABAP user IDs to DBMS user
IDs. The SUSR_SUID_BADI_PIF package interface of package SUSR_MAIN contains the
interface. As a fallback implementation, the system performs a one-to-one mapping if there is
no implementation available.
SAP delivers the BAdI implementation BADI_DBMS_USERNAME_PREFIX to add the prefix
"DBMS_" to the DBMS user IDs. This BAdI implementation is disabled by default.
To generate passwords for DBMS users select the generate passwords option. By default no
password is set.
Remove Mapping of DBMS Users from the Corresponding ABAP User
This function removes the mapping between ABAP users and DBMS users. If you remove the
mapping, the DBMS user is not deleted. You cannot change the DBMS user mapped to the
ABAP user directly. You must remove the DBMS user assignment before you can assign
another DBMS user.

Assigning DBMS Roles to DBMS users

This function tries to assign the selected roles (see Role Selection) to the selected users.
Remove DBMS Roles from DBMS users
This function tries to remove DBMS roles from the selected users.
On SAP HANA, all DBMS users are assigned the PUBLIC role automatically. You cannot
remove this role. Nor can you remove a role assigned by another user, for this report, that is the
DBMS user configured for the database connection.
Selection
User Selection
You can select users by ABAP user ID, user type, user group assignment, ABAP role

______________________________________________________________
SAP AG 2
 SAP System
______________________________________________________________

assignment, or a combination of these attributes. An additional option exists to display or

process only unmapped users.
Role Selection
You can select roles with the selection options or by choosing a user from whom the program
copies the role assignments. A combination of both methods is possible. You can fill the DBMS
Role field with the Select Role pushbutton.
Function Selection
This area contains the program functions that were explained under Features above.

Output
The program provides an execution log. In dialog mode, error messages appear directly in the
user list as described under Features above.

______________________________________________________________
SAP AG 3