topic Re: SAP_ALL in Application Development and Automation Discussions

SAP_ALL

Former Member — Thu, 26 Jul 2007 09:26:24 GMT

Hi,

I need to give <b>sap_all</b> profile for a user. But I need to restrict some transactions like su01 and other administration transaction. How can i do this?

Re: SAP_ALL

Former Member — Thu, 26 Jul 2007 09:53:14 GMT

Hi,

You either need to:

(a) copy SAP_ALL to a Z_SAP_ALL profile and modify it

(b) just give the user the standard profiles they require.

Regards,

Graham

Re: SAP_ALL

Former Member — Thu, 26 Jul 2007 11:18:56 GMT

Hi Graham,

Thanks for your reply. I had copied sap_all to z version. i have activated it too... now tell me how can i edit the newly created active profile.

Re: SAP_ALL

Former Member — Thu, 26 Jul 2007 13:02:46 GMT

Hi Sekar,

Okay, use transaction PFCG and select the role in change mode, now select the Authorisations tab and then the button for Change Authorisation Data. You will see the menu structure laid out and you can change/remove individual items.

Also see the SAP Help on help.sap.com regarding Profile Generator

Regards,

Graham

Re: SAP_ALL

Matt_Fraser — Thu, 26 Jul 2007 16:37:46 GMT

Before you can easily edit the new Z_SAP_ALL profile in PFCG, you must convert it to a role. You can do this in SU25, using option 6 "Copy Data From Old Profiles."

--Matt

Re: SAP_ALL

koehntopp — Thu, 26 Jul 2007 18:55:55 GMT

Sekar,

I hate to be the one being always negative on SAP_ALL like roles, but this is not going to be secure by any means.

There's so much stuff in SAP_ALL, even if you manage to remove 50 objects, there'll still be a thousand ways to get at the functionality.

What do you need that one for?

Frank.