11-08-2007 4:51 PM
Dear All,
We are in project preperation phase and will be going to blueprinting
phase soon. We have functional consultants started working and my
solution architect wants to created a role restricting the use of
Basis "transaction codes and access t000 table " etc and my PM
wants that role to not distrub, any access to funcional consultants activity.
There are similar questions posted in sdn here, but none of the answers
are very precise.
I am trying to go to PFCG--> create a role say "zprojectusers" and selected "SAP_ALL" template.
At this stage, I am wondering if somebody can precisely tell to disable which areas of the list and
generate a profile.
or manually add which authorization objects ? (alternative method)
I wiill be happy even if I am able to achive restriction to some transactions like "Su01, PFCG, SCC4, SE06, SU03 etc key transaction codes".
Please advice.
Thanks
Nick.
11-09-2007 5:42 AM
Hi nick,
The best way is to seat together with the Functional guy and ask him to give his requirement to access the t-codes.....obviously u r basis guy so u know that which t-code u shouldnt give it to them.... might be it takes some time of 2-3 hours ..but it will be better....or else ....there are some predefined ..ABAPers role in the system....copy it and modify it according to u r reuirement..
If anyone of this forum know the excat way to do it ...then please let us know...
Regards,
kamlesh
11-09-2007 5:42 AM
Hi nick,
The best way is to seat together with the Functional guy and ask him to give his requirement to access the t-codes.....obviously u r basis guy so u know that which t-code u shouldnt give it to them.... might be it takes some time of 2-3 hours ..but it will be better....or else ....there are some predefined ..ABAPers role in the system....copy it and modify it according to u r reuirement..
If anyone of this forum know the excat way to do it ...then please let us know...
Regards,
kamlesh
11-09-2007 7:25 AM
Agree with this approach, trying to limit SAP_ALL is far to dangeorus if you do not exactly know what you are doing. Ther is no cook book for that!
11-09-2007 8:34 AM
Thank you verymuch for your input. Very helpful to build a case for a good meeting with functional consultants.