Dear Guru's,
Does anyone have any idea of the possibility to exclude transactions (or values of authorization object S_TCODE) from lets say a SAP_ALL profile when profile SAP_ALL is imported as base profile in a role? The reason I'm asking is that we want to provide some of the consulants of a SAP_ALL profile, except for some transactions we describe as 'critical' like the SCC* range. I have tried several possible solutions including the use of multiple standard SAP roles and profiles but it doesn't seem to work like the way I want it to work.
Any suggestions in this matter are welcome.
Best regards, Ron