Skip to Content
avatar image
Former Member

Assignment of Role to user for testing/debugging

Hi

I need to create a user in SAP system for Testing and debugging.

Is should not violate the security.

May i know what role shall i assign to him?

It finding it hard, can you assist me?

Cheers

Ricky

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

4 Answers

  • Best Answer
    avatar image
    Former Member
    Sep 11, 2008 at 11:30 AM

    > I need to create a user in SAP system for Testing and debugging.

    So, create a user.

    And try to find out what needs to be tested and/or debugged and in which system, dev/test/prod....

    > Is should not violate the security.

    Please define "the security".

    > May i know what role shall i assign to him?

    How should we know which roles are available in your system?

    > It finding it hard, can you assist me?

    Tricky one, my psychic abilities fall short here.

    Unfortunately this is not the kind of questions we can answer easily. You'll have to provide more information.

    Jurjen

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      > If you had, get the similar situation, what whould you haad done.

      I would have copied the account of the 'problematic user' (the one that triggered the need for a test/debug session)

      Next to these authorizations I would build a small role with SE80 and make sure all S_* objects only have the value '03' in the ACTVT fields. That one I would present to the auditors and wait to see what they have to say. If it's still a no-no a refresh of the test system would be the next option.........

      Jurjen

      (Yes, I know, different account. Just activated my own OSSid)

  • avatar image
    Former Member
    Sep 22, 2008 at 04:01 PM

    partially

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      >

      > partially

      The debugging is not only an authorization topic on it's own. You also need to consider what you want to (permit) debug (of), how your system is setup to handle the debugging (abap and dispatcher params) and the user type in combination with the params.

      I don't think it is possible to set this up correctly for a specific scenario without knowing what that scenario is, which release you are on and how much you know about the different types of debugging.

      > It finding it hard, can you assist me?

      If in doubt, do not permit it at all. Good developers whom I know tell me that even debugging in a development system is a symptom of a not-too-good program in the first place.

      Cheers,

      Julius

  • avatar image
    Former Member
    Sep 11, 2008 at 02:22 PM

    If your requirement was for creating a ABAP Developer role, then you could have used SAP menu.

    Sadly, I don't find any thing related solely for testing and debugging.

    You can do one thing:

    Goto pfcg

    Give the new role name e.g. ZTestDebug

    Now on right hand side of menu tab, you will find copy menus

    In that click on ->from SAP menu

    Inside that search for ABAP Workbench. You may find more than one such hits. Select the one which has folders for overview, development, test, utilities etc.

    Out of these, deselect all the folders except test and add to the menu.

    In the menu , manually add t-codes required by your team for debugging like se80 etc. And as mentioned by Jurjen make sure that you give activity as display for these.

    Generate the role and assign to necessary users.

    Add comment
    10|10000 characters needed characters exceeded

  • Sep 11, 2008 at 11:16 PM

    Did you try reading this book - Authorization Made Easy. Check this thread in case you want the link.

    Authorization Made Easy -- Book

    AB

    Add comment
    10|10000 characters needed characters exceeded