Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Restricting BASIS Transaction to functional consultants.

Former Member
0 Kudos

Dear All,

We are in project preperation phase and will be going to blueprinting

phase soon. We have functional consultants started working and my

solution architect wants to created a role restricting the use of

Basis "transaction codes and access t000 table " etc and my PM

wants that role to not distrub, any access to funcional consultants activity.

There are similar questions posted in sdn here, but none of the answers

are very precise.

I am trying to go to PFCG--> create a role say "zprojectusers" and selected "SAP_ALL" template.

At this stage, I am wondering if somebody can precisely tell to disable which areas of the list and

generate a profile.

or manually add which authorization objects ? (alternative method)

I wiill be happy even if I am able to achive restriction to some transactions like "Su01, PFCG, SCC4, SE06, SU03 etc key transaction codes".

Please advice.

Thanks

Nick.

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Hi nick,

The best way is to seat together with the Functional guy and ask him to give his requirement to access the t-codes.....obviously u r basis guy so u know that which t-code u shouldnt give it to them.... might be it takes some time of 2-3 hours ..but it will be better....or else ....there are some predefined ..ABAPers role in the system....copy it and modify it according to u r reuirement..

If anyone of this forum know the excat way to do it ...then please let us know...

Regards,

kamlesh

3 REPLIES 3

Former Member
0 Kudos

Hi nick,

The best way is to seat together with the Functional guy and ask him to give his requirement to access the t-codes.....obviously u r basis guy so u know that which t-code u shouldnt give it to them.... might be it takes some time of 2-3 hours ..but it will be better....or else ....there are some predefined ..ABAPers role in the system....copy it and modify it according to u r reuirement..

If anyone of this forum know the excat way to do it ...then please let us know...

Regards,

kamlesh

0 Kudos

Agree with this approach, trying to limit SAP_ALL is far to dangeorus if you do not exactly know what you are doing. Ther is no cook book for that!

0 Kudos

Thank you verymuch for your input. Very helpful to build a case for a good meeting with functional consultants.