topic Adding function group SUUS to role/profile in Application Development and Automation Discussions

Adding function group SUUS to role/profile

Former Member — Tue, 01 Sep 2009 14:01:23 GMT

Hi,

for correcting an error in a SAP defined role, i have to add a function group SUUS to the role or profile

I have copied the role to a new role,

Please let me know of how to add the fuction group SUUS to role or profile

Re: Adding function group SUUS to role/profile

JPReyes — Tue, 01 Sep 2009 14:14:46 GMT

As far as I remember that value need to be added to authorization object S_RFC.

I'm moving this to the Security forum you might get a better answer there.

Regards

Juan

Re: Adding function group SUUS to role/profile

Former Member — Tue, 01 Sep 2009 14:31:48 GMT

Hello,

Function group can be added to S_RFC object.

Please ask security person to make those changes.

Thanks,

Prasant K Paichha

Re: Adding function group SUUS to role/profile

Former Member — Tue, 01 Sep 2009 14:49:47 GMT

As the others have said, the object is S_RFC. Your security team will know exactly where to put it.

They should not change the SAP defined role, they should copy it and create a custom version which you then change.

Re: Adding function group SUUS to role/profile

Former Member — Tue, 01 Sep 2009 21:03:24 GMT

Note that there are typically several function modules (which is where the real checks are) within a function group.

So you should take a more granular approach toward user authorization objects and role assignments and your config...

As of release 7.10 you can also control S_RFC at the level of the function module name, and not the group --> RFC_TYPE = 'FUNC'. Here, a carefull naming convention for function module names makes sense...

I also recommend investigating why it is being requested, considering the rest of your role design....

Cheers,

Julius