autorization data related

[Former Member]

user has sent Su53 screenshot in which there are some missing values in red. if we change\add those missing values for that role, he might get required access. but it will also change the access of user who already has that particular role assigned and don't want the newly modified access. how this can be solved.

[Former Member]

user has sent Su53 screenshot in which there are some missing values in red. if we change\add those missing values for that role, he might get required access. but it will also change the access of user who already has that particular role assigned and don't want the newly modified access. how this can be solved.

[TammyPowlas]

Best thing to do is to do an authorization trace using STAUTHTRACE. SU53 doesn't always show what exactly is needed. Transaction STAUTHTRACE will show better results

[raviraj_sap]

Hi Pratibha

Use t-code SUIM to determine the role which will require least modification to provide the required access, then make a copy of that particular role from t-code PFCG & thereafter assign it to user.

If applicable, put an expiry date to that the role entry!

Thanks

Ravi