topic SAP_ALL Display in Application Development and Automation Discussions

SAP_ALL Display

Former Member — Fri, 17 Jul 2009 14:51:14 GMT

Hi all,

Regarding our system version (CRM 5.0 & BI 7.0), is there any standard role/profile like SAP_ALL profile but with DISPLAY authorizaton only ?

Best regards,

GPO

Re: SAP_ALL Display

Former Member — Fri, 17 Jul 2009 15:14:43 GMT

I can't say for sure about your version. We are running 4.7 and there is no such role. I created one by creating the role in our standard namespace, then going to the authorizations menu. Choose Edit ---> Insert Authorizations ---> From Profile. Type in SAP_ALL. It is a lot of work but then I went in and manually adjusted activities to Display, Display Changes, etc.

It is no easy task. It is lots easier to create a custom role only containing authorizations for user to perform necessary functions related to job function.

Michael

Re: SAP_ALL Display

sdipanjan — Fri, 17 Jul 2009 15:25:36 GMT

Hi,

Did you went through the Security Guides of these areas? I hope SAP has answered all these in their respective Security Guides.

Please go though the relevant security guide in below link:

http://service.sap.com/securityguide

Regards,

Dipanjan

Re: SAP_ALL Display

Former Member — Fri, 17 Jul 2009 15:32:22 GMT

Dear GPO,

Welcome to SDN group.

> Regarding our system version (CRM 5.0 & BI 7.0), is there any standard role/profile like SAP_ALL profile but with DISPLAY authorizaton only ?

This is very common question in sdn. You search by SAP_ALL...& i am sure that you will get several valuable information.

Regards,

Rafikul

Re: SAP_ALL Display

Former Member — Mon, 20 Jul 2009 06:39:36 GMT

There is no standard role for SAP_All with display authorization only , you need it to create it by your own , secondly SAP_all Profile should not be given to any one except the super user,. The authorizations must be given to the concern according to the job requiements or work which has been carried out by the concern.

regards

Mysterious

Re: SAP_ALL Display

Former Member — Mon, 20 Jul 2009 11:29:41 GMT

hi,

A another way to make sap_all display is to create a role import sap_all profile in that role and make all the activities in display (03). really pain.. try this download the same role open it with notepad / wordpad find ACTVT 06 and replace it with ACTVT 06 .... now it;s become SAP_ALL_DISP role .....

I have done this on SND and Training boxes only.

regards,

Mirza

Re: SAP_ALL Display

jurjen_heeck — Mon, 20 Jul 2009 12:16:17 GMT

> A another way to make sap_all display is to create a role import sap_all profile in that role and make all the activities in display (03).

This is an incorrect answer and bad advice!

There are quite a few dangerous activities which do not have/check an ACTVT field.

This subject has been covered several times in this forum and in my opinion the only valid answer is: "you can not".

Re: SAP_ALL Display

Former Member — Mon, 20 Jul 2009 22:04:29 GMT

> This subject has been covered several times in this forum and in my opinion the only valid answer is: "you can not".

And like all others which have gone before it, it will probably remain in unanswered status forever.