Required accounts and permissions for an SAP scan

Two accounts must be configured for an SAP scan:

Process account

The "Process account" is used to execute the scan process on the selected collector. This account must have local administrator rights and interactive login rights on the collector.

 

Scan-Account

The "scan account" is used for the actual scan. This account must have read access to the following tables:

  • UST04
  • UST10S
  • AGR_1016b
  • USR12
  • UST12
  • TOBJ

 

To access the tables, the SAP component "SAP Connector for Windows 64bit" is required, which you can download from the SAP download portal (login required).

 

The needed files are (64bit versions):

sapnco_utils.dll

sapnco.dll

 

The components are contained in the downloaded package.

Copy the missing files to the following target directory on the ARM server:

%ProgramData%\protected-networks.com\8MAN\technologies\server\[YourDatabase-Id]\63732467f6d84a659c85e7cdaa0f3cde\server\bin