topic Re: Authorizationn for specific tcodes... in Application Development and Automation Discussions

Authorizationn for specific tcodes...

Former Member — Mon, 05 Apr 2010 09:01:52 GMT

Hi Experts,

I m new in SAP.Please ignore if question is dump.

There r some reports and we have created tcodes for each. now our client wants that only one user would have access to execute that reports.how can i satisfy this requirement? Please provide me step by step procedure for that.

Thanks in advance.

Best Regards,

Vinayak

Re: Authorizationn for specific tcodes...

arpan_paik — Mon, 05 Apr 2010 10:08:20 GMT

Hi Vinayak,

From report you have created Tcodes... This is very basic for role development.

1) Create a role in PFCG with those transactions

2) Assign that role to the intended user only

But while creating a role then many thing need to take care

1) Tcodes you have created do have proper authorization check in customer table (manged by transaction SU24)? If not should be maintained else auth object can be added manually.

2) To know what are the auth objects required for a transaction there are many ways

a) Analysis Authority-check for the associated program

b) Through report RSABAPSC

c) Through trace (Tcode ST01)

3) Few more things are there like maintaining values for open auth field what you have to gather from functional people. Sometimes from your experience.

Not sure what does the above sounds to you but for these things I recomend you to have a training on SAP Security.

Cheers,

Arpan

Re: Authorizationn for specific tcodes...

Former Member — Mon, 05 Apr 2010 10:23:06 GMT

Hi Experts,

Thanks for sharing your experience.

Now i understood about role & their authorizations..but client want that role under one new profile..i have basic idea about profile.steps for making new profile & how can i solve this issue? provide details.

Best Regards,

Vinayak

Re: Authorizationn for specific tcodes...

jurjen_heeck — Mon, 05 Apr 2010 12:43:08 GMT

Better focus on roles. Profiles are just a technical layer nowadays.

Please rephrase the remark "client want that role under one new profile" as it doesn't make sense to me.

Roles are the linking pins between users and authorizations. There's no way to get a role "under a profile".

Re: Authorizationn for specific tcodes...

Former Member — Mon, 05 Apr 2010 12:48:37 GMT

Hi,

Thanks for reply.

Problem has been solved now...

Best Regards,

Vinayak

Re: Authorizationn for specific tcodes...

Former Member — Mon, 05 Apr 2010 16:58:39 GMT

Then please close the thread, and also use the search first next time please.

Cheers,

Julius

Re: Authorizationn for specific tcodes...

Former Member — Fri, 09 Apr 2010 10:23:09 GMT

thanks.