Skip to Content
avatar image
Former Member

Authorization object

My requirement is to provide the users with access only to visualize all the customizing done through the transaction SPRO.

The solution adopted was to assign the user with the role SAP_BC_CUS_CUSTOMIZER. However this does not provide the users with the authorization to execute the transactions available in SPRO.

Is there a simpler way to provide the users with the authorization to visualize the transactions available within SPRO without having to deal with all the transactions one by one?

Thank you.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

6 Answers

  • Best Answer
    avatar image
    Former Member
    Jul 29, 2009 at 04:08 PM

    That is an SAP generated role and it is not preferred to assign these to users. Also, the SAP roles do not have profiles generated so the transaction would not be executable just by assigning it.

    Copy this role to your own namespace such as Z_BC_CUS_CUSTOMIZER and maintain all authorizations and generate profile. This might give you what you are looking for.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi ,

      I tried to create a new namespace Z_BC_CUS_CUSTOMIZER but the problem persists as i have to maintain all authorization for all the transactions available within SPRO.

  • avatar image
    Former Member
    Jul 30, 2009 at 06:51 AM

    Hope this would help you...

    As a starting point, your SPRO display role should S_PROJECT auth object

    with display only, S_PROJECTS auth object with activity 01, SM30/SM31,

    S_TABU_DIS with activity 03 and every other authorization object with

    display-only access.

    Depending on the IMG nodes you'd like to display, building such a role

    may take a while.

    If you need access to all nodes in SPRO, I suggest you create a new

    Customizing role in PFCG (based on an existing IMG view) and then modify

    the authorization objects to display-only:

    - PFCG>Create>Menu Tab>Utilities>Customizing Auth>Add>IMG

    Project view.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi mohan,

      i tried to create a new SPRO display role with all the authorization objects you mentioned. But the problem persists as i still have to maintain the authorizations for all the transactions within SPRO.

      I cannot create a role based on an existing IMG view as no project view exists.

  • avatar image
    Former Member
    Jul 29, 2009 at 04:28 PM

    Please use the forum search with strings "SPRO" and "display". This has been discussed several times before.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 29, 2009 at 04:30 PM

    If you search with SPRO in Security forum you will get many details on Display specific SPRO authorizations.. please go thorugh them and let me know if you have any confusion then..

    Regards,

    Dipanjan

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Aug 01, 2009 at 01:23 PM

    any update on this issue..

    were you able to resolve this issue?

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Aug 10, 2009 at 11:27 AM

    The solution was available on the following thread:

    spro-display

    Add comment
    10|10000 characters needed characters exceeded