Skip to Content
author's profile photo Former Member
Former Member

Roles for an ABAP Developer in ECC system

Hi Everyone,

In our client server(ECC6.0), for ABAP Developer SAP_ALL profile is assigned. I want to restrict this user.

If I see standard roles, there are many roles related to developer.

I found one standard role: SAP_BC_DWB_ABAPDEVELOPER. Is this one role sufficient for an ABAP Developer ?

Please, guide me how to restrict this user.

Thanks & Regards

Sudhir Sadhu

Add a comment
10|10000 characters needed characters exceeded

Related questions

2 Answers

  • Posted on Oct 02, 2013 at 02:59 AM

    Hi Sudhir,

    I would suggest you create a customized role and assign the tcode as per the requirement. Later you can adjust and restrict the authorization by maintaining the activity fields to corresponding authorization object.

    Still if you want to use the standard role for ABAPer, please send us the requirement, will suggest the standard role for that.

    regards

    kartik

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 02, 2013 at 05:32 AM

    Hi Sundhir

    You can create the Z role form SAP_ALL profile, in that remove the all the basis transactions and then provide only in development system. in our environment we have created like that way.

    and refer the SAP link http://help.sap.com/saphelp_nwce10/helpdata/en/45/66c9e611841b24e10000000a155369/content.htm

    Otherwise you can create a Custom developer role, refer the links for developer t code's

    http://wiki.scn.sap.com/wiki/display/ABAP/Developers'+Transaction+Codes

    Thanks

    Sriram

    Add a comment
    10|10000 characters needed characters exceeded

    • Hi Sudhir

      > You can create the Z role form SAP_ALL profile, in that remove the all the basis transactions

      If we assign like you said, he can access all the T-codes except basis T-codes. That means he can access all the other T-codes. I want to restrict the user from accessing all the T-codes except ABAP Developer T-codes.

      Yes, it’s possible you have to exclude the ABAP & Basis T codes

      In the second link which you have mentioned the list of ABAP Developer's T-codes. It is useful, but I think some T-codes might be missing. I have to check it out.

      1.SU53 - to find the missing authorizations, In case if developer find any authorizations are missing simple execute the t code SU53 its will show the missing objects & rights

      2. SP02 - to see the user spool

      Create Z: Common role assign this role to all developers

      Thanks

      Sriram

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.