Authorization object

[Former Member]

My requirement is to provide the users with access only to visualize all the customizing done through the transaction SPRO.

The solution adopted was to assign the user with the role SAP_BC_CUS_CUSTOMIZER. However this does not provide the users with the authorization to execute the transactions available in SPRO.

Is there a simpler way to provide the users with the authorization to visualize the transactions available within SPRO without having to deal with all the transactions one by one?

Thank you.

[Former Member]

That is an SAP generated role and it is not preferred to assign these to users. Also, the SAP roles do not have profiles generated so the transaction would not be executable just by assigning it.

Copy this role to your own namespace such as Z_BC_CUS_CUSTOMIZER and maintain all authorizations and generate profile. This might give you what you are looking for.

[Former Member]

Hi ,

I tried to create a new namespace Z_BC_CUS_CUSTOMIZER but the problem persists as i have to maintain all authorization for all the transactions available within SPRO.

[jurjen_heeck]

Please use the forum search with strings "SPRO" and "display". This has been discussed several times before.

[sdipanjan]

If you search with SPRO in Security forum you will get many details on Display specific SPRO authorizations.. please go thorugh them and let me know if you have any confusion then..

Regards,

Dipanjan

[Former Member]

Hope this would help you...

As a starting point, your SPRO display role should S_PROJECT auth object

with display only, S_PROJECTS auth object with activity 01, SM30/SM31,

S_TABU_DIS with activity 03 and every other authorization object with

display-only access.

Depending on the IMG nodes you'd like to display, building such a role

may take a while.

If you need access to all nodes in SPRO, I suggest you create a new

Customizing role in PFCG (based on an existing IMG view) and then modify

the authorization objects to display-only:

- PFCG>Create>Menu Tab>Utilities>Customizing Auth>Add>IMG

Project view.

[Former Member]

Hi mohan,

i tried to create a new SPRO display role with all the authorization objects you mentioned. But the problem persists as i still have to maintain the authorizations for all the transactions within SPRO.

I cannot create a role based on an existing IMG view as no project view exists.

[Former Member]

any update on this issue..

were you able to resolve this issue?

[Former Member]

The solution was available on the following thread:

[Former Member]

You got your solution from that thread??

How odd...