topic Re: modify multiple roles in Application Development and Automation Discussions

modify multiple roles

Former Member — Tue, 01 Apr 2014 19:53:33 GMT

Hi,

I have a requirement to modify multiple of roles with one transaction code.

We have transaction code ex: xxxxxx exists in around 40 roles, but we replace xxxxxx with another t-code ex:*******

How can I replace the old t -code with new t-code in all roles?

Is there any smart way of doing it? or Do I have to change each role?

Please suggest.

Many Thanks.

Re: modify multiple roles

Colleen — Wed, 02 Apr 2014 01:11:02 GMT

Hi Basis Lady

Are the other 39 roles derived roles or do you have 40 single roles?

If 40 single you will need to maintain them to adjust the authorisations for each


We have transaction code ex: xxxxxx exists in around 40 roles, but we replace xxxxxx with another t-code ex:*******

As an aside - sounds like you might want to review your security design and role build to simplify unless they are derived roles.

Regards

Colleen

Re: modify multiple roles

Former Member — Thu, 03 Apr 2014 10:44:36 GMT

Hi Lee,

Thanks very much for your reply.

in that 40 roles, there are 8 Master roles and remaining are derived from these.

And If removing one single t-code from many roles is a pain and taking up too much time .

Then Is it possible is creating a new role to explicitly deny access to that t-code and add that to everyone.??

Re: modify multiple roles

Colleen — Thu, 03 Apr 2014 10:50:40 GMT

So you have 8 roles to maintain directly and then propagate changes to the derived

no - security in sap doesn't do exclusion (except for p_pernr object)

have you supported security before?

regards

Colleen

Re: modify multiple roles

Former Member — Thu, 03 Apr 2014 11:06:36 GMT

Thanks for advising on this. No, I haven't completely supported security earlier.

I am a basis person currently lookin to secuity issues too as no special resource available for this.

Re: modify multiple roles

Colleen — Thu, 03 Apr 2014 11:09:52 GMT

Recommend you read up on imparting verse derived and if you are doing more security look at ADM940 course

Re: modify multiple roles

Former Member — Thu, 03 Apr 2014 11:19:15 GMT

Couldn't agree more about the training course. Trying to support SAP security without a solid understanding of how it works is not sustainable for long (or indeed, at all).

Steve.