User profiles

[Former Member]

Hi All,

We have SAPR/3 4.7 Ides in our office.I have created one user.That user want to access all the transactions except su01.How to create the profile fot that user without accessing su01 transaction.

Need help.

Thanks,

Madhavi

[former_member190272]

Hi

Lock T code SU01in system Via Tcode SM01.

Awards point if help full

Thanks

Pankaj Kumar

[Former Member]

hi Pankaj,

Dont you think locking the tcode in sm01 will lock it for everybody.

[Former Member]

HI,

Create a role equivalent to SAP_ALL profile. Then u have 2 ways to restrict only SU01 tcode. One would be , in PFCG in that particular role go to MENU tab option in the click on the find button ie. binoclaur then in the pop up enter su01. it will display all the lacations where su01 is present. Note down all the navigations eg. Accounting-Logistics-sales etc etc. Now in the menu manually open the tree i.e. the path which have noted. and in the go to su01 and delete where ever su01 is present. Save the role and attach it to the user. Now the user will be able to access everything except SU01.

Hope that vud help.

Regards,

Mudassir

[Former Member]

You can't really do this you'd have to create a new profile in PFCG and assign the TCODES for everything expect the one you want like A* to SU00* and SU02* to Z*

Or something strange like that.

[l_borsboom]

You would better restrict on the S_USER_* objects (set them to display) because there are a number of transactions that perform exactly the same as SU01 and are still available if you restrict authorization on SU01 itself.

Those transactions are:

GCE1

OY30

OY29

OY28

OY27

OY22

OVZ5

OTZ1

OPF0

OMWF

OMEH

OMDL

Good luck!

Kind regards,

Lodewijk