Security - Indirect access to transaction for user

Question

User is processing SM35 line and gets and authorization error because has no access to KB51N.  We want to grant access to the transaction needed, but not give direct access (via Transaction Window) to the user. Is this possible, and if yes, how?

Answer 1

As this discussion leads into the wrong direction, I simply reply to the initial question now.
Please note that using SYSTEM for administrative purposes is highly discouraged and directly granting privileges to any single user will invariantly lead to massive problems once you try to manage permissions in a production environment.
Instead take the small additional effort and create roles with the appropriate privileges for their use cases.
In How to Define Standard Roles for SAP HANA Systems Richard Bremer provides samples for how to create roles that are transportable and that split the privileges in a reasonable way for many multi-user scenarios.
Whatever you do: disable SYSTEM user after setting up your privilege management. It's not the god-like user you seem to want anyway. So, when you need to grant privileges anyhow, you can do it in a sustainable way from the start.
- Lars