The following standard dialogue and service users are available for the SAP PI system.
| User | Roles | Description |
| PISUPER | NWA_READONLY SAP_XI_ADMINISTATOR_J2EE SAP_XI_CONFIGURATOR_J2EE SAP_XI_DEVELOPER_J2EE SAP_XI_CONTENT_ORGANIZER_J2EE SAP_XI_RWB_SERV_USER SAP_XI_MONITOR_J2EE SAP_SLD_ADMINISTATOR SAP_SLD_CONFIGURATOR SAP_SLD_ORGANIZER SAP_SLD_DEVELOPER SAP_XI_CMS_SERV_USER UDDI_Admin SERVICES_REGISTY_READ_WRITE | Access to all components of SAP NetWeaver PI. (Dialogue user) |
| PIAF[SID] | SAP_XI_APPL_SERV_USER SAP_SLD_CONFIGURATOR | Service user for the Advanced Adapter Engine (to call other PI component). |
| PIAPPL[SID] | SAP_XI_APPL_SERV_USER | Service user for sender application system |
| PIDIR[SID] | SAP_XI_ID_SERV_USER SAP_SLD_CONFIGURATOR | Service user for Integration Directory |
| PIREP[SID] | SAP_XI_IR_SERV_USER SAP_SLD_CONFIGURATOR | Service user for ES Repository |
| PIRWB[SID] | SAP_XI_RWB_SERV_USER_MAIN SAP_SLD_CONFIGURATOR | Service user for Runtime Workbench |
| PILSADMIN | SAP_XI_CMS_SERV_USER | User for the Change Management Server |
| PILDUSER | SAP_BC_AI_LANDSCAPE_DB_RFC | User for the System Landscape Directory (SLD) |
| PIIS[SID] | SAP_XI_IS_SERV_USER_MAIN | User for the Integration Server |
PIPPUSER | SAP_XI_APPL_SERV_USER | User for principal propagation |
| PI3RDAPIUSER | SAP_XI_CONFIGURATOR SAP_XI_CONFIGURATOR_EXT_J2EE | User for calling a Java Web service used to set up point-to-point connections |
| PI_JCO_RFC | SAP_BC_JSF_COMMUNICATION_RO | User for RFC communication between ABAP and Java |
Note
- [SID] is the system ID of the corresponding SAP system.
- You are advised to copy default users immediately after installation if a default user becomes locked accidentally.
- Change the passwords of default users soonest to prevent unwanted users from logging in with full permission.
Service User Roles
The following service user roles are available:
| User Roles | Description |
| SAP_XI_CMS_SERV_USER | Supplies all the authorizations required by the CMS for dialog-free access to the other components of PI, mainly the Enterprise Services Repository and Integration Directory. |
| SAP_XI_IR_SERV_USER_MAIN | Supplies all the authorizations required by the Enterprise Services Repository for dialog-free access to the other PI components. |
| SAP_XI_ID_SERV_USER_MAIN | Supplies all the authorizations required by the Integration Directory for dialog-free access to the other PI components. |
| SAP_BC_AI_LANDSCAPE_DB_RFC | Supplies all the authorizations required by the SLD for dialog-free access to the database of the SAP NetWeaver Application Server. This role is usually assigned to exactly one service user or communication user, which must be defined in the administration of the SLD for database consistency. |
| SAP_XI_APPL_SERV_USER | Supplies all the authorizations required by application systems (ABAP and Java) for dialog-free access to the components of PI. |
| SAP_XI_RWB_SERV_USER_MAIN | Supplies all the authorizations required by the Runtime Workbench for dialog-free access to the other components of PI. |
| SAP_XI_AF_SERV_USER_MAIN | Supplies all the authorizations required for communication between SLD, Integration Server, and Adapter Framework. |
| SAP_XI_IS_SERV_USER_MAIN | Supplies all PI-specific authorizations required by the Integration Server for dialog-free access to business systems based on SAP NetWeaver. Service users that have to be created in business systems for this purpose generally need additional authorizations that are specific to the service to be accessed. |
