Skip to Content
avatar image
Former Member

Restrict Important T- Codes

Hi,

I want to know, many users are having access to the important T-Codes : SU01, PFCG , etc.. which only authorization teams should have, but in earlier days roles was built like that, now if i make some role chagnes then it will mess up. Because many roles providing access to these T-codes.

So what iam asking could you tell me is there any other to restrict these particular transactions to some set of users? It should not reflect any impact on roles.

What is SHD0 transaction and what does it do ? Is there any way to fix this with the helpw of SHD0 transaction?

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

4 Answers

  • Best Answer
    avatar image
    Former Member
    Mar 17, 2009 at 10:15 AM

    Hai,

    You can remove the Tcodes from the Tcode list through PFCG and regenerate the profile for that role.

    If you have one single role containing these tcodes then it is just a matter of seconds.

    Check the below link.....

    http://sap.ittoolbox.com/groups/technical-functional/sap-log-pp/shd0-tcode-1411069?cv=expanded

    Regards,

    Yoganand.V

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 17, 2009 at 10:42 AM

    Hi ,

    I got your reply on this . Many thanks . But what Iam asking is , I need an user level T-Code restriction, so could you suggest

    And Iam not able to see any relevant information in the below link

    http://sap.ittoolbox.com/groups/technical-functional/sap-log-pp/shd0-tcode-1411069?cv=expanded

    Hence please advice!

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 22, 2009 at 06:25 PM

    Hi Pavithra Balasubramanian,

    If you are looking for the SHD0 help docu chek here [SHD0|http://help.sap.com/saphelp_erp2004/helpdata/EN/67/232037ebf1cc09e10000009b38f889/frameset.htm]

    Regards,

    S.Manu.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 23, 2009 at 07:31 AM

    HI

    To check for users assigned with a particular role, transaction SUIM is your answer. Here you can find a list of all the users who have been assigned a particular role.

    Secondly, it is not possible to restrict users for executing any Tcodes without modifications in their assigned roles.What you can possibly do is copy roles, make modifications and assign these new roles with restricted access to the users.

    Lastly, the transaction SHD0, is the SAP Transaction Code for Transaction and Screen Variants

    Program/Report used to generate this transaction is SAPMSHD0.

    I hope this helps you

    Regards

    Chen

    Add comment
    10|10000 characters needed characters exceeded