The authorization object ARBCIGPRG is specifically designed to control the execution of special programs and reports within the SAP Ariba Cloud Integration Gateway (CIG) add-on. This object is a critical component of the security roles delivered with CIG, such as /ARBCIG/ADMIN or /ARBCIG/MONITOR. Administrators assign this authorization to users who need to run CIG-related reports for transaction monitoring, master data extraction, or other administrative tasks, ensuring that only authorized personnel can execute these potentially sensitive programs.

B. ARBCIGRFC: This authorization object is used to control access to Remote Function Call (RFC) destinations, not for executing local reports or programs.

C. ARBCIGSPR: This object governs authorization for accessing and modifying CIG-specific customizing activities within the SAP Project Reference Object (SPRO) or Implementation Guide (IMG).

D. ARBCIGCLS: This authorization object is used to restrict access to specific ABAP classes and their methods within the Ariba CIG add-on namespace.

1. SAP Help Portal

SAP Ariba Cloud Integration Gateway Configuration Guide: "Roles and Authorizations for SAP Ariba Cloud Integration Gateway". This document lists the authorization objects delivered with the CIG add-on. It explicitly states:

ARBCIGPRG: Authorization object for special programs.

ARBCIGRFC: Authorization object for RFC.

ARBCIGSPR: Authorization object for SPRO.

ARBCIGCLS: Authorization object for CIG class.

(This information is consistently found in the configuration guides for various releases of the CIG add-on).

2. SAP Help Portal

SAP Ariba Cloud Integration Gateway Overview Guide: The "Security Information" section discusses the importance of assigning appropriate roles and authorizations

which include the objects for specific tasks like program execution (ARBCIGPRG) and configuration (ARBCIGSPR).