Skip to Content
avatar image
Former Member

restrictions tcodes from role

hi experts

In my dev system i created fico role from sap menus for fico-module users.now they asking restrict the t-codes FSP0, FSS0, FS00 from that role.how can we restrict that tcodes from that role

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    avatar image
    Former Member
    Oct 17, 2008 at 09:37 AM

    > how can we restrict that tcodes from that role

    By taking the tcodes out of the role menu and maintaing the authorization data.

    Also please try not to thing in terms like restricting. SAP security is about allowing things.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Oct 22, 2008 at 11:21 AM

    Hi Vasu,

    You can restrict the tcodes from the role by removing the tcodes from the menu tab, once you delete the tcodes from the menu tab, you need to go to auth tab and maintain the missing auth obj values and again after deletion of tcodes the auth tab will turn YELLOW.

    So make sure you delete the tcodes from the menu and then you need to go to auth tab and generate the profile, until the tab becomes GREEN and then do user compare.

    Hope this answer is helpful 😊

    Best,

    Suchitra

    Add comment
    10|10000 characters needed characters exceeded