Removal of SE14 from authorization object S_TCODE

[Former Member]

Hi Team,

I need to remove SE14 from a particular role in ECC system.

On analysis, I found that the tcode is coming from the object S_TCODE with value = S*.

I tried to split the range as S*-SE13A* , SE15-S_YZ* ( we cross checked the tcode values from table TSTC and inserting this range did not show SE14  )but still the tcode appears in this role via SUIM and testing also.

When I tried to deactivate the range S*-SE13A* from the object S_TCODE , then the SE14 is removed. This confirms that SE14 is coming from the range S*-SE13A*.

Below is the snap shot of the S_TCODE object values:

Please suggest if there is an alternate way to split the range.

Thanks

Imaan

[former_member185239]

Hi Imaan,

Just give a try with the below settings under the S_TCODE

S0*-S002

SA*-SA13

SA15-SA_PUSH_COMPARE

SB01-SBWP_GP

SC2_IDE-SCWB

SD11-SDWB2

SE01-SE13

SE15-S_YZ*

You need to check other roles which are assigned to the  users. If you are making the change in a role then you need to create a new user and assigned the corresponding role and check whether it is working or not.

With Regards

Ashutosh Chaturvedi

[Former Member]

Hi Ashutosh,

As per your range, I can see many tcodes missing from the list..like below :

S-32

S-33

S1MD

S2KDT

SA14 and many more...

Iam not sure if this is correct ..

Thanks

Imaan

[former_member185239]

Hi Imaan,

Follow the steps as below,

- Create the copy of the role in which you are making the changes.

- Make the changes in the copied role as suggested.

- Assign the role to a test user if you have any in the system.

- Try to execute the SE14.

share the result here. I will just check on the missing transaction.

With Regards

Ashutosh Chaturvedi

[Former Member]

Hi,

We  tried the range S-32 to SE13A* and this worked ...This covered all tcodes as seen in table TSTC.

Thanks for your inputs...

Thanks

Imaan

[sabirshah1]

Hi Imaan,

try using following options

1. Configure the calling tcode in SE97 not to perform the S_TCODE Check or

2. configure SU24 for the calling tcode to Add the tcode as a value for S_TCODE.

[Former Member]

Hi Sabir,

Can you please explain in more detail about the SU24 method.

I need to remove SE14 only from this role, in this authorization object.

I need to understand if SU24 is modified , will it affect all SE14 roles

Thanks

Imaan

[sabirshah1]

Hi Imaan ,

as ashutosh said copy the role and and make changes in zrole which is been copied and check.

Best Regards.