Skip to Content
0

Is it possible to assign personas/admin with display only access

Oct 31, 2017 at 07:39 PM

39

avatar image

Hi there,

I was just wondering if it was possible to assign personas/admin with display only access for such things as user and role management?

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Best Answer
Tamas Hoznek
Nov 03, 2017 at 02:42 AM
0

There is no delivered role doing this, but you could create your own.

Copy the standard role /PERSONAS/SUPPORT_ROLE. Among others, this allows certain user- and role-configuration accesses. Take away the user config 'Change' authorization, leaving only 'Display' in place. Also remove the theme and flavor display authorizations and the cache delete authorization. This should leave you with a role that allows displaying users and role configuration.

You may have to add S_TCODE authorization for transactions /PERSONAS/ROLES and /PERSONAS/USERS, since you don't want to grant access to the complete /PERSONAS/ADMIN transaction.

I haven't tried this myself yet but it looks like this should do what you are looking for.

Show 3 Share
10 |10000 characters needed characters left characters exceeded

Thank-you Tamas. Greatly appreciated.

0

Tamas, If I understand you correctly the /PERSONAS/SUPPORT_ROLE would give the same abilities as /PERSONAS/ADMIN but just restrict things a little more? If so this might be the better option as theme and flavor display authorizations would also be required.

Thanks again,

Chris

0

Yes, of course you can base your custom role on /PERSONAS/ADMIN_ROLE if that's closer to the access you want to achieve.

The key thing is though that once you are assigning Admin authorization, this opens most of the admin activities. The current granularity of the Personas authorization objects is not too high. The upcoming support package will change that and allows much more detailed control.

0