Adding function group SUUS to role/profile

[Former Member]

Hi,

for correcting an error in a SAP defined role, i have to add a function group SUUS to the role or profile

I have copied the role to a new role,

Please let me know of how to add the fuction group SUUS to role or profile

[JPReyes]

As far as I remember that value need to be added to authorization object S_RFC.

I'm moving this to the Security forum you might get a better answer there.

Regards

Juan

[Former Member]

Hello,

Function group can be added to S_RFC object.

Please ask security person to make those changes.

Thanks,

Prasant K Paichha

[Former Member]

As the others have said, the object is S_RFC. Your security team will know exactly where to put it.

They should not change the SAP defined role, they should copy it and create a custom version which you then change.

[Former Member]

Note that there are typically several function modules (which is where the real checks are) within a function group.

So you should take a more granular approach toward user authorization objects and role assignments and your config...

As of release 7.10 you can also control S_RFC at the level of the function module name, and not the group --> RFC_TYPE = 'FUNC'. Here, a carefull naming convention for function module names makes sense...

I also recommend investigating why it is being requested, considering the rest of your role design....

Cheers,

Julius