Necessary SAP Authorizations | Performer Suite User Manual

In this chapter, you will find the authorizations required to successfully perform actions in the Performer Suite.

Download all PDFs and BW role files (ZIP, 2.7 MB): Download
Last Update: 27.02.2025

To save time, you can download the SAP roles listed below and import them into your SAP system.
How to: Upload SAP Roles to your BW + BW4HANA

SAP S/4HANA

We do not differ between S/4HANA and BW/4HANA.
Please use BW/4HANA authorizations for your S/4HANA.

20260212_FlowChart_EN_Necessary SAP Authorizations-20260212-095050.png — Decision Flowchart

	Product	Download SAP Role	Documentation	Description
SAP BW/4HANA – Create/Update Function Modules	General	Z_ROLE_PS_ADMIN_BW4.SAP	ACGR-Z_ROLE_PS_ADMIN_BW4001-20220308-Doc_EN-Com_EN-A4H.pdf	Only the admin-user needs to create function modules (in your development system).
SAP BW/4HANA – Sync	General	Z_ROLE_PS_SYNC_BW4.SAP	ACGR-Z_ROLE_PS_SYNC_BW4001-20250106-Doc_EN-Com_EN-A4H.pdf	Required by users who should be able to synchronize your SAP metadata with your Performer Suite database (mandatory to see your SAP entities). In case of manual synchronization: the Named User. If you want to perform an automated SAP-Sync with the AutomationTool, it is sufficient to give your background SAP-user this authorization.
SAP BW/4HANA – Documentation and Analysis	Docu Performer & System Scout	Z_ROLE_PS_DP_SYSC_BW4.SAP	ACGR-Z_ROLE_PS_DP_SYSC_BW4001-20250227-Doc_EN-Com_EN-A4H.pdf	Required by every user who works with the Performer Suite (in every SAP system). If you want to perform an automated SAP-Sync with the AutomationTool, it is sufficient to give your background SAP user this authorization.
SAP BW/4HANA – Translation	Translation Steward	Z_ROLE_TRANSLATION_STEWARD.SAP	ACGR-Z_ROLE_TRANSLATION_STEWARD001-20251216-Doc_EN-Com_EN-A4H.pdf	Add this role in addition to the standard Performer Suite user to use the Translation Steward.
SAP BW/4HANA – BPC Sync	General	Z_ROLE_PS_SYNC_BPC4.SAP	ACGR-Z_ROLE_PS_SYNC_BPC4001-20220308-Doc_EN-Com_EN-A4H.pdf	Users who should be able to synchronize their BPC SAP metadata.
SAP BW/4HANA – BPC Documentation and Analysis	Docu Performer & System Scout	Z_ROLE_PS_DP_SYSC_BPC4.SAP	ACGR-Z_ROLE_PS_DP_SYSC_BPC4001-20220308-Doc_EN-Com_EN-A4H.pdf	User who works with BPC entities in the Performer Suite.

	Product	Download SAP Role	Documentation	Description
SAP BW – Create/Update Function Modules	General	Z_ROLE_PS_ADMIN_BW.SAP	ACGR-Z_ROLE_PS_ADMIN_BW001-20220308-Doc_EN-Com_EN-BI2.pdf	Role for users who should be able to create and update function modules (in your development system).
SAP BW – Sync	General	Z_ROLE_PS_SYNC_BW.SAP	ACGR-Z_ROLE_PS_SYNC_BW001-20250106-Doc_EN-Com_EN-BI2.pdf	Role for users who should be able to synchronize the SAP metadata with your Performer Suite database.
SAP BW – Documentation and Analysis	Docu Performer & System Scout	Z_ROLE_PS_DP_SYSC_BW.SAP	ACGR-Z_ROLE_PS_DP_SYSC_BW001-20222710-Doc_EN-Com_EN-BI2.pdf	Role for users who should be working with the Performer Suite (perform Documentation and analysis functions).
SAP BW – Translation	Translation Steward	Z_ROLE_PS_TS_BW.SAP	ACGR-Z_ROLE_PS_TS_BW001-20250916-Doc_EN-Com_ENa.pdf	Add this role in addition to the standard Performer Suite user to use the Translation Steward.
SAP BW – BPC Sync	General	Z_ROLE_PS_SYNC_BPC.SAP	ACGR-Z_ROLE_PS_SYNC_BPC001-20220308-Doc_EN-Com_EN-BI2.pdf	Role for users who should be able to synchronize the BPC metadata with your Performer Suite database.
SAP BW – BPC Documentation and Analysis	Docu Performer & System Scout	Z_ROLE_PS_DP_SYSC_BPC.SAP	ACGR-Z_ROLE_PS_DP_SYSC_BPC001-20220308-Doc_EN-Com_EN-BI2.pdf	User who works with BPC entities in the Performer Suite (perform Documentation and analysis functions).

	Product	Note
ERP	General	Please use all authorizations from SAP BW above. In our internal development tests, all BW roles were also used for ERP and worked flawlessly. Theoretically, all entities and tables that exist in BW should also exist in ERP. If this causes problems due to your company policies, simply remove the tables from the role.

Product

Note

ERP

General

Please use all authorizations from SAP BW above.

info In our internal development tests, all BW roles were also used for ERP and worked flawlessly.

Theoretically, all entities and tables that exist in BW should also exist in ERP.
If this causes problems due to your company policies, simply remove the tables from the role.

	Product	Documentation	Note
SAP BO	General	3_SAP_BO_Role.pdf	Contains the rights required for synchronizing SAP BO entities in the Performer Suite.

	Product	Documentation	Note
SAP HANA	General	4_SAP_HANA_Role.pdf	We recommend that you connect to your HANA system via our new way: HANA SQL Connection. In order for your SAP HANA user to interact with Performer Suite, a role must be manually created.

	Product	Note
SAC	General	See chapter: SAC Connection \| Create OAuth Client In summary: All Objects for which the respective User has read rights are also synchronized by the Performer Suite when using the OAuth client type Interactive Usage and can then be documented and analyzed. Therefore, a role should be used that covers the relevant SAC objects and has read access to them. The User's role permissions in SAC are only relevant if an OAuth client of the Interactive Usage type is used, which requires a SAC user login within the Performer Suite. We have tested various Roles and have come to the following conclusion: With the BI Content Viewer role, the two relevant API calls for Analytical Objects (Stories, Insights, Analytic Applications, Templates) and for Security Objects (Roles, Users, Teams) can be executed successfully. Note: With Analytical Objects, only Public-objects are synchronized with this role.

Product

Note

SAC

General

See chapter:
SAC Connection | Create OAuth Client

In summary:
All Objects for which the respective User has read rights are also synchronized by the Performer Suite when using the OAuth client type Interactive Usage and can then be documented and analyzed. Therefore, a role should be used that covers the relevant SAC objects and has read access to them.

The User's role permissions in SAC are only relevant if an OAuth client of the Interactive Usage type is used, which requires a SAC user login within the Performer Suite.

We have tested various Roles and have come to the following conclusion:

With the BI Content Viewer role, the two relevant API calls for Analytical Objects (Stories, Insights, Analytic Applications, Templates) and for Security Objects (Roles, Users, Teams) can be executed successfully.
Note: With Analytical Objects, only Public-objects are synchronized with this role.

	Product	Note
DSP	General	The Datasphere user used in the Performer Suite needs to be authorized to the desired Spaces. The user must have a Custom and Scroped Role for those Spaces that enables READ for the following aspects: Data Warehouse Consumption Data Warehouse General Data Warehouse Data Access Control Data Warehouse Data Builder Data Warehouse Data Integration Data Warehouse Connection Data Warehouse Runtime Space Files Spaces Data Warehouse Graph Modeler Alternatively you can assign the user the following Standard SAP Roles: DW Modeler DW Viewer See chapter: SAP Datasphere Connection

Product

Note

DSP

General

The Datasphere user used in the Performer Suite needs to be authorized to the desired Spaces. The user must have a Custom and Scroped Role for those Spaces that enables READ for the following aspects:

Data Warehouse Consumption
Data Warehouse General
Data Warehouse Data Access Control
Data Warehouse Data Builder
Data Warehouse Data Integration
Data Warehouse Connection
Data Warehouse Runtime
Space Files
Spaces
Data Warehouse Graph Modeler

Alternatively you can assign the user the following Standard SAP Roles:

DW Modeler
DW Viewer

See chapter:
SAP Datasphere Connection

AutomationTool
When scheduling documentations via the Automation Tool, the dedicated SAP user needs the authorizations for synchronization, documentation & analysis.