Skip to Content
avatar image
Former Member

can i give only display permission to user having sap_all profile

Dear friends,

Is it possible to give sap_all with display persmissions only.

Regards,

Tarun Chandel

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

4 Answers

  • avatar image
    Former Member
    Sep 13, 2008 at 11:29 AM

    > Is it possible to give sap_all with display persmissions only.

    No.

    Please use the forum search functionality and/or read this:

    This is a frequently asked question.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 13, 2008 at 03:08 PM

    Hi,

    sorry not possible.

    Regards

    Ashok

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 14, 2008 at 03:28 AM

    No, as Jurjen has responded.

    However, if you don't assign SAP_ALL profile, you can achieve it with a custom role with display (ACTVT =03) access but then you'll have the same issues as

    https://forums.sdn.sap.com/click.jspa?searchID=16252518&messageID=5853309

    Regards,

    Zaheer

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 14, 2008 at 05:34 AM

    In addition to noticing that there are a lot of interesting and usefull threads with duscussions on this topic, you will also notice that not one of them provides a complete solution.

    Probably the most polular "second best" solution if you are going to go this route is to create a role and insert the authorizations from template profile SAP_ALL and then go through all the objects to:

    - 1) Change the activity type fields to activity type values (most notably ACTVT to '03' and '08', but not only limited to this...)

    - 2) Disable some objects completely.

    - 3) Some special objects need very specific values for fields which are not activity related to prevent change modes.

    I can give you some pointers on these three and I am sure others will chip in to discuss tweaks, but you will still be stuck with S_TCODE ranges....

    Cheers,

    Julius

    Add comment
    10|10000 characters needed characters exceeded