topic Re: Profile Only ! in Application Development and Automation Discussions

Profile Only !

Former Member — Mon, 11 Feb 2008 17:52:37 GMT

Hi,

I need to add:

1. A profile to a role ??? Sounds OK ?

2. I want to add an Object --NOT MANUALLY - to a role (tried SU24?? failed !)

3. since this role doesnot have t codes -- how do I keep the Menu tab green (any ideas othe rthan ZTCODE?)

Whole I dea is to create a communication /system user with a role as I can transport it ..

Thanks

Re: Profile Only !

Former Member — Mon, 11 Feb 2008 18:26:17 GMT

> Hi,

> I need to add:

> 1. A profile to a role ??? Sounds OK ?

> 2. I want to add an Object --NOT MANUALLY - to a role (tried SU24?? failed !)

> 3. since this role doesnot have t codes -- how do I keep the Menu tab green (any ideas othe rthan ZTCODE?)

> Whole I dea is to create a communication /system user with a role as I can transport it ..

> Thanks

Hi George,

If I am thinking through your situation correctly, you have a user which needs only object level access?

In this case I would create a role and manually add in the objects which are required and document what the objects are used for in the role text field. As long as you document it, I can't see there being a problem if no S_TCODE auths are required.

If you need the menu tab to be populated then something like SU53 or SU3 in there can't do much harm and prevents need to create & transport a custom t-code.

Re: Profile Only !

Former Member — Mon, 11 Feb 2008 18:36:00 GMT

Yes..All i wanted that the user have an object level access...I wanted do away with manual addition..now I will do it manually .OK I will add an SU53 too.

So the take home is ...Object levels .system /communication user ...add manually the Auth objects ?

Re: Profile Only !

Former Member — Tue, 12 Feb 2008 17:51:04 GMT

> So the take home is ...Object levels .system /communication user ...add manually the Auth objects ?

You can also maintain authorization objects and values to fields against an RFC enabled "Function module" or types of "Services" in SU24. You can then add these to the role menu in PFCG and it will add those objects and prposed field values for you. That way you do not have to create a role free of object S_TCODE by adding the objects manually.

I thought you knew that, because I vaguely remember having discussed it with you before?

Cheers,

Julius

Re: Profile Only !

Former Member — Tue, 12 Feb 2008 18:28:53 GMT

> You can also maintain authorization objects and values to fields against an RFC enabled "Function module" or types of "Services" in SU24. You can then add these to the role menu in PFCG and it will add those objects and prposed field values for you. That way you do not have to create a role free of object S_TCODE by adding the objects manually.

good point, I forgot about that option.

Re: Profile Only !

Former Member — Tue, 12 Feb 2008 19:05:43 GMT

Thanks Juluis , Alex.....

Great insights

Re: Profile Only !

Former Member — Tue, 12 Feb 2008 20:21:38 GMT

Actually, I heard a rumour that Alex was writing an SDN blog on this...