Creating a auth group

[Former Member]

Hi,

I want to restrict access for a user in such a way that he sees only the following tables.

AGR_define

TSTC

USOBT

All these tables come under the auth group SA, SS or SC which is SAP delivered. Now if I give any of these auth groups, then the user will have access to all the tables within this authorization group. I tried to create a new auth group in SE54 and when i tried to assign the auth group to one of the SAP standard table, it would not let me do it. It gives the following error message ' choose the key from the allowed namespace'

Is there any way to restrict access to a few SAP standard tables?, thanks in advance

regards,

[Former Member]

I guess you'll give acces via transaction SM30 or SE16 ? If restricting on auth group is not enough you can try to make a 'transaction variant'. Start transaction SHD0, than you will go through the transaction and after each screen you'll have the possibility to choose what you want to see, with or without context,...So in transaction SM30 you can choose to skip the first screen and with the new transaction the user won't be able to change the table. You can afterwards assign a transaction to the variant, put this transaction in a role and assign the role to the user. The user will be able to start transaction SM30 but will go directly to the second screen, so he will not be able to put another table in the selection screen.

When the user is allowed to only those 3 tables you have to create 3 transaction variants. This is a quick explanation, but If this is usuable you'll probably have more info on searching on transaction SHD0

[Former Member]

Ask your developes to create a parameter transaction linked to each table - 1 tcode for each table.

Very quick to do this via SE93 & no need to give SE16/SM30

[Former Member]

Did you create the new auth group with an allowed namespace ? Your custom auth group should start with a "Z". Once create you will be able to change it for these tables.