Skip to Content
Former Member
Nov 19, 2011 at 05:27 PM

Direct Changes in the PRD system



I administer an SAP ECC 6.0 system on Oracle /AIX 6.1. Ocasionally some mischievous superusers make direct change roles in the production system. This is a serious compromise of security and I'm under instructions to curtail this practice

I require your assistance on the following

1) Is it possible to disable generations of profiles via PFCG in the PRD & QAS systems ? I reckon such a development all changes to roles will have to be done in the DEV system & thereafter transported across the landscape. How else should I overcome this problem ?

2) Is it possible to identify the particular user who made the direct change to the roles in the PRD system ?