topic Re: Create Authorization Profile Manually in Application Development and Automation Discussions

Create Authorization Profile Manually

Former Member — Thu, 06 May 2010 09:50:34 GMT

Dear Experts,

I want to know the Tcode through which I can create Authorization Profile.

I know that through PFCG we can create a Role and from there we can generate a Profile, But how can i create a profile without creating a Role.

I think this is possible because the Profile : SAP_ALL does not have a role.

Regards

Re: Create Authorization Profile Manually

GauthamV — Thu, 06 May 2010 09:54:04 GMT

Tcode: OOSP. ( HR related)

Tcode:SU02. (General)

Re: Create Authorization Profile Manually

Former Member — Thu, 06 May 2010 09:54:47 GMT

Hi,

This is basis Work . Ask the basis guys to create a role for this t-code. After doing that assign the users to that role.

And the SAPL_ALL role can't be assigned to many people.

With Regards,

Sumodh.P

Edited by: Sumodh P on May 6, 2010 3:25 PM

Re: Create Authorization Profile Manually

Former Member — Thu, 06 May 2010 09:55:03 GMT

Hi,

The transaction is SU02, it's in the folder 'Authorisations and Profiles (Manually Maintenance)' under the Role Admin folder in the main menu.

Regards,

Nick

Re: Create Authorization Profile Manually

Former Member — Thu, 06 May 2010 10:13:03 GMT

Tcode through which I can create Authorization Profile

It's actually the task of a SOX or Security Consultant. If you have rights to acess SU02 you can do it.

Go to Profiles------>Create.

Here you can create a profile without a role being generated.

Re: Create Authorization Profile Manually

Former Member — Thu, 06 May 2010 10:15:24 GMT

@Gautham - That doesn't look like the answer that was there at the time I posted my reply

Re: Create Authorization Profile Manually

GauthamV — Thu, 06 May 2010 10:21:47 GMT

After doing some analysis i found the difference between the both, so i thought

it would be misleading to others if i don't change it.

Before i could edit and thank you for the same i got a reply from you.

Re: Create Authorization Profile Manually

ThomasZloch — Thu, 06 May 2010 11:16:41 GMT

Please post in the correct forum next time (Netweaver Security), ABAP General is not a catch-all box for every SAP related problem.

Thomas

Re: Create Authorization Profile Manually

jurjen_heeck — Thu, 06 May 2010 13:00:14 GMT

> how can i create a profile without creating a Role.

I am curious as to why you would want that? PFCG (the profile generator) is a very good tool which makes creating profiles through roles much easier than the old fashioned way.

Re: Create Authorization Profile Manually

Former Member — Thu, 06 May 2010 17:10:27 GMT

>

Tcode through which I can create Authorization Profile

> It's actually the task of a SOX or Security Consultant. If you have rights to acess SU02 you can do it.

> Go to Profiles------>Create.

> Here you can create a profile without a role being generated.

It is nothing to do with a SOX consultant unless that person is also a security administrator.

Re: Create Authorization Profile Manually

Former Member — Thu, 06 May 2010 17:10:29 GMT

>

Tcode through which I can create Authorization Profile

> It's actually the task of a SOX or Security Consultant. If you have rights to acess SU02 you can do it.

> Go to Profiles------>Create.

> Here you can create a profile without a role being generated.

It is nothing to do with a SOX consultant unless that person is also a security administrator.