topic Re: create a role with everything except parameterization option in Application Development and Automation Discussions

create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 12:14:40 GMT

Hello,

We need to create a new role with all object except parameterization

option.

How we can create it?

Best regards,

Julene González

Re: create a role with everything except parameterization option

JPReyes — Wed, 10 Dec 2008 12:18:26 GMT

Moved to Security forum

Re: create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 12:25:49 GMT

Thank you. Do you know what we do?

Re: create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 12:28:11 GMT

Which parameterization are you talking about here?

Re: create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 14:38:37 GMT

Hi,

We need one rol with all the object except cuztomizing option

regards,

Re: create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 15:20:50 GMT

So you are looking for something like "SAP_ALL without SPRO"?

There have been a number of discussions about this already... please take a look through them.

Cheers,

Julius

Re: create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 17:02:56 GMT

Hi,

yes, that's is exactly what we want. But I don't find any message in this forum with this optionss

best regards,

Julene

Re: create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 18:29:25 GMT

Hi Julene,

Use the search on the security forum for SPRO

Result number 9 looks promising...

Re: create a role with everything except parameterization option

Former Member — Wed, 10 Dec 2008 19:23:27 GMT

I had no idea that we had discussed SPRO that often...

As you can see from the thread Alex pointed out ( [this one|https://forums.sdn.sap.com/click.jspa?searchID=19779873&messageID=6581648] ) it is also usefull to know which system in the landscape this role is destined for.

Assuming this is for the QAS system, why don't you identify all the business roles for the production system (those which do not permit customizing in production either, nor user admin and other "basis" tasks, nor development work...etc...) and assign them all to the users (I assume these are support users).

They should be in QAS already, and if your client settings are correct (T), you will experience the same or a very similar result.

Of course they won't have "SAP_ALL minus SPRO", but they will have what you are actually using for the "real users"... in production (except it will be in QAS).

That way they have also have a more realistic testing experience with the correct roles (only).

Just a thought,

Julius