In general all available functions of the ProAdmin can be protected using the SAP authorization system and a special authorization object. Details see ProNovia Authority Map .
Since SAP standard functions may be called from ProAdmin the necessary authorizations for these transaction are required too.
Authorization Object
Authorization objects allow no namespaces, therefore the ProAdmin authorization object is in the customer namespace Z*.
As standard the authorization object „Z_PRON_ADM" is installed and used. In case this name cannot be used, a new authorization object, including all fields listed below must be created and saved in the customizing of the ProAdmin. (Please refer to document ProAdmin, Customizing Manual)
Authorization Object Fields
The authorization object includes the following fields:
Authorization group (BEGRU)
Controls authorization of each function
Activity (ACTVT)
„03" for displaying the function area „02" for execution of a manipulating function
...
.