Authorizationn for specific tcodes...

[Former Member]

Hi Experts,

I m new in SAP.Please ignore if question is dump.

There r some reports and we have created tcodes for each. now our client wants that only one user would have access to execute that reports.how can i satisfy this requirement? Please provide me step by step procedure for that.

Thanks in advance.

Best Regards,

Vinayak

[arpan_paik]

Hi Vinayak,

From report you have created Tcodes... This is very basic for role development.

1) Create a role in PFCG with those transactions

2) Assign that role to the intended user only

But while creating a role then many thing need to take care

1) Tcodes you have created do have proper authorization check in customer table (manged by transaction SU24)? If not should be maintained else auth object can be added manually.

2) To know what are the auth objects required for a transaction there are many ways

a) Analysis Authority-check for the associated program

b) Through report RSABAPSC

c) Through trace (Tcode ST01)

3) Few more things are there like maintaining values for open auth field what you have to gather from functional people. Sometimes from your experience.

Not sure what does the above sounds to you but for these things I recomend you to have a training on SAP Security.

Cheers,

Arpan

[Former Member]

Hi Experts,

Thanks for sharing your experience.

Now i understood about role & their authorizations..but client want that role under one new profile..i have basic idea about profile.steps for making new profile & how can i solve this issue? provide details.

Best Regards,

Vinayak

[jurjen_heeck]

Better focus on roles. Profiles are just a technical layer nowadays.

Please rephrase the remark "client want that role under one new profile" as it doesn't make sense to me.

Roles are the linking pins between users and authorizations. There's no way to get a role "under a profile".

[Former Member]

Hi,

Thanks for reply.

Problem has been solved now...

Best Regards,

Vinayak

[Former Member]

Then please close the thread, and also use the search first next time please.

Cheers,

Julius

[Former Member]

thanks.