How to create a role for SAP_ALL DISPLAY only

[Former Member]

Dear ALL,

I want to create a role with SAP_ALL but only for display.

I was tried to create the role and download in txt format then replace all ACTVT * with ACTVT 03 and upload the txt file. Then assign this role to new user and tested but user can run create or change transactions. 

Please suggest some solution, how to create in your  system. We are using SAP ECC 6.0 and oracle 10.2 g.

Thanks in advance.

Regards,

Ajay

[former_member182034 · Accepted solution]

hi Ajay,

please create a role with PFCG and put the following Authorization Objects then Save & Generate the Role.

S_TCODE

TCD: *

S_TABU_DIS
ACTVT: 03

DICBERCLS: *

S_PROJECT

ACTVT: 03

this role will be used as Display only.

Regards,

[Former Member · Accepted solution]

Thanks Mr. M. Abdul Jamil,

I have created role as per suggested by you.

But when i was run some tcodes like MM03, ME23N or other Z/Y tcodes, it's required some other object authorization.

Your suggested role is helpful but need to modified in correct. Do you have any idea.

Regards,

[former_member182034 · Accepted solution]

Dear Ajay,

if you get more authorization object then you just add new AO in the role with 03 activity and generate it.

FYI....This thread is not relevant to oracle. it is a security question and You have to put it on security forum.

Regards,

[Former Member]

there is no standard role/profile for SAP_ALL Display you have to create it manually by adopting SAP_ALL profile else you can use profile S_A_SHOW

[Former Member]

Hi,

This has been asked many times in SDN you will have to create yourself.

example

http://scn.sap.com/thread/558294

Regards,

Johan