Authorizations in Change Management Service

To grant authorizations, Change Management Service (CMS) uses the User Management Engine (UME) in SAP J2EE Engine.

You can use CMS to perform the following UME actions. These UME actions allow you to create UME roles with special authorizations. For examples of roles in CMS, see Roles in Change Management Service .

The following UME actions are defined:

UME Actions in CMS

UME Action	Permitted Functions
CMS.Display	This UME action grants you access to CMS. This UME action serves as the basis for all further UME actions.
CMS.ExportOwn	Release your own activities in SAP NetWeaver Developer Studio
CMS.ExportForeign	Release other users’ activities in SAP NetWeaver Developer Studio
CMS.Transport	Check-In Add to queue Unlock queue entries Restore system state Import Import check: Assemble Forward to another track (the authorization for this function is checked in the target track)
CMS.CriticalFunctions	Delete queue entries Lock/Unlock Import Queue
CMS.Approve	Confirm/Reject
CMS.ConfigureDomain	Save domain Update CMS
CMS.CreateTrack	New Save (new track) Save as
CMS.ModifyTrack	Save (existing track) Add/Delete runtime systems Delete Add/Delete track connections
CMS.OverAllTracks	UME action that allows you to edit all tracks, independently of track-specific UME actions
CMS.UserAdmin	UME action for processing track-specific UME actions
CMS.Administrate	Composite UME action that includes all other UME actions

The UME actions CMS.Export and CMS.Configure have now been replaced by more configurable authorization modules.

Previous UME action	Replaced by the following UME actions
CMS.Export	CMS.ExportOwn CMS.ExportForeign
CMS.Configure	CMS.ConfigureDomain CMS.CreateTrack CMS.ModifyTrack

Roles in Change Management Service

For individual descriptions of the UME actions that you can use for your work in Change Management Service (CMS), see Authorizations in Change Management Service.

The following is a list of useful roles in CMS:

CMS Role Types

Role	Assigned UME Actions	Privileges of the Role
Guest	CMS.Display	Display import queues and transport histories in the Transport Studio Display details of queue entries and logs. Display configuration files in Landscape Configurator
Developer	CMS.Display CMS.ExportOwn	Has all Guest privileges. Release own activities in SAP NetWeaver Developer Studio
Quality Manager	CMS.Display CMS.Approve CMS.ExportForeign	Has all privileges of Guest. Approve and reject software components in Transport Studio. Release foreign (third-party) activities in Developer Studio
Operator	CMS.Display CMS.Transport CMS.CriticalFunctions	Has all privileges of Guest. Perform test imports, check-in, assemble, unlock queue entries, restore system state Perform the critical functions Delete Queue Entries, Add to Queue, Import Older Versions, Forward to Another Track.
Configurator	CMS.Display CMS.CreateTrack CMS.ModifyTrack	Has all privileges of Guest. Perform all configuration functions at track level in Landscape Configurator
Administrator	CMS.Administrate	Combines all CMS privileges in one role

Users who have been assigned the CMS administrator role should also have J2EE Engine Administrator rights. All users who are CMS administrators should therefore be assigned to the J2EE Administrator group as well.

To configure the domain in CMS you need to create a CMS User. As well as the administrator rights for Component Build Service (CBS) and Design Time Repository (DTR), this user also needs the write permission for System Landscape Directory (SLD).