Remove transaction codes from multiple roles at a time

[Former Member]

Hello,

how to remove transaction codes from multiple roles at at time?

Thank you in Advance.

[Former Member]

There is no SAP delivered role mass change available. Best way to do this is to create a CATT through tcode SECATT.

Check out - http://www.sapsecurityonline.com//tutorials/secat.htm.

This may not be easy though as my guess is that the tcodes you want to remove are in different locations in your roles and the CATT you develop will need to find the tcode in the same location,

[former_member629414]

I would suggest the best and secure way is clean role menu to remove transactions from roles

[Former Member]

Hi,

Be aware of what you are doing. Removing a transaction is also a change in the authorization objects. I suggest you do it by hand and first investigate what the influence is on the authorization objects. Use the expert mode when entering the authorizations otherwise you could get some nasty results. This will certainly happen if you use secatt or catt. Be careful.

Have fun

Jan van Roest

[Former Member]

Hi Vanita,

Why do you want to remove a t-code from all the roles. Are you no longer going to use the t-code. If this is the case then you can lock the transaction code in T-code SM01 so that no one can use it. But this would effect other users as well, it should only be locked if no one should use the particular T-code.

Another alternative is to write a program to remove the particular T-Code from the table AGR_TCODES where the relation ship between the role and t-code is stored.

Thanks.

[Former Member]

Narsing,

I would not recommend locking a t-code. It demonstrates a failure in your ability to restrict access via the authorisation concept.