Enable authorization roles for Neptune transactions and the Neptune Cockpit

You can import the standard role /NEPTUNE/DEVELOPER either by direct file upload in the SAP transaction PFCG or via transport import.

The standard role /NEPTUNE/DEVELOPER contains all required authorizations for the Neptune transactions and the Neptune Cockpit. Optionally, you can import or create, and assign several roles to users to restrict access. There are several template roles included in the subfolder Optional_Authorizations in the installation package. You can also upload these as single roles in the SAP transaction PFCG, or import them as a bundle of template roles with the transport in the same folder. See Neptune standard roles for more information about the different authorization roles.

You need to import the role in new installations, and for upgrades where new authorization checks have been introduced. This would typically be the case for a major upgrade, for example, from Neptune DXP - SAP Edition 23 LTS to Neptune DXP - SAP Edition 24 LTS. The installation package contains the Authorizations folder. This folder contains an authorization role, which you can import either as a transport (*.NAD files), or you can upload it from file (*.SAP file) in the SAP transaction PFCG. After you have imported the role into the system, make a copy of the standard role /NEPTUNE/DEVELOPER, make any adjustments you find necessary, generate an authorization profile, and assign it to the corresponding developers and administrators. After importing the transport(s) with the role, it might be necessary to run the program PFCG_TIME_DEPENDENCY for user master comparison if this is not already scheduled to run as a background job in the target system.