Skip to Content
avatar image
Former Member

how to get all SAP standard delivered PFCG roles

Hi There,

Where and how can I download the SAP best parctices standard delivered PFCG technical roles for ERP system.

Thanks,

Kailash

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

10 Answers

  • Best Answer
    Jul 07, 2010 at 09:35 AM

    The name of SAP standard roles starts with "SAP".

    The [Securityguide|https://service.sap.com/securityguide] of an application should describe which SAP deliverd roles are available as copy templates for human users and as standard roles for technical users. Example: in the Security Guide of the SAP Solution Manager you find the complete list of standard roles for that product.

    Sometimes, you find the description in notes only. Example: Note 451960 for the Audit Information System

    By the way: The SUIM report for finding roles, RSUSR070, has options to search for used and unused roles, too.

    Kind regards

    Frank Buchholz

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 07, 2010 at 04:52 PM

    Hi Follow this steps,

    Most of them have already pointed in the correct direction:

    1. execute transaction SUIM

    2. Go to main Roles tab

    3. Click on" by Roles name"

    4. Enter SAP*

    There you go list of all SAP delivered roles.

    Remember to choose both Single and composite role

    Edited by: Franklin Jayasim on Jul 7, 2010 6:52 PM

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 07, 2010 at 07:27 AM

    ehhmmmm, in PFCG?

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 07, 2010 at 08:26 AM

    Hi Kailash,

    Its in transaction PFCG with roles naming convention as SAP_*

    Add comment
    10|10000 characters needed characters exceeded

  • Jul 07, 2010 at 08:43 AM

    >

    > Hi There,

    >

    > Where and how can I download the SAP best parctices standard delivered PFCG technical roles for ERP system.

    >

    > Thanks,

    > Kailash

    The SAP delivered roles are more about granting access to blocks of functionality they are not best practice definitions.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 07, 2010 at 08:50 AM

    > ... the SAP best parctices standard delivered PFCG technical roles

    You can take a look in table AGR_1251 field "Modified" for any SAP* roles which do not contain any Modified or Manually authorizations.

    Good luck!

    Julius

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 07, 2010 at 07:34 PM

    Kailash,

    You can search by SAP_MM* / SAP_PP / SAP_SD....

    2 if .search with the help of tables then sap roles need to be generated. (Copy them first to your naming convention & then search using AGR_1251).

    3. If you dont find the roles in existing system/client. search in other systems,with the help of pfcg you can download the roles to PC and then upload them to new client.

    PFCG: enter the role name->download (mass downloaded)

    Thanks,

    Sri

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 08, 2010 at 01:42 AM

    This message was moderated.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 10, 2010 at 06:26 AM

    This message was moderated.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 10, 2010 at 04:23 PM

    Thanks

    Add comment
    10|10000 characters needed characters exceeded