topic Re: Restriction authorization in Application Development and Automation Discussions

Restriction authorization

former_member747244 — Thu, 27 Aug 2009 09:15:58 GMT

Dear Gurus,

Users in our production system have access to t-code se38,se11.

Now we want to remove these authorizations,but these authorizations are provided to the users via diffrent roles and its difficult to track these authorizations.

I want to know that is it possible to create a restriction authorization where we can define the t-code value as 'not equal' and restrict the desired authorization

Please update

Thanks and regards

Tushar

Re: Restriction authorization

Former Member — Thu, 27 Aug 2009 09:29:24 GMT

if the transaction authorization given by custome role you have to find that role and change accordingly, there is no short cut.

Re: Restriction authorization

Former Member — Thu, 27 Aug 2009 09:45:11 GMT

I agree with Netweaver Expert.

If you are finding it difficult to identify those roles then I suggest that someone on your security team gets training ASAP as it it a very, very basic task to ID roles with those authorisations. You can do it in SUIM or via table AGR_1251 in less than 10 minutes.

Re: Restriction authorization

Former Member — Thu, 27 Aug 2009 10:50:12 GMT

This message was moderated.

Re: Restriction authorization

Former Member — Thu, 27 Aug 2009 13:18:00 GMT

This message was moderated.

Re: Restriction authorization

Former Member — Thu, 27 Aug 2009 13:20:38 GMT

This message was moderated.