Controlling Access at a transaction code level!

[Former Member]

Is it possible to control access at the transaction code level? Ex: Controlling access to VK11. The system already has several roles with access privileges to VK11. As a new requirement if I have to control access to a very limited set of users/roles then what is the best approach? Do I have to clean up all the existing roles or this can be handled in a simpler way?

[mvoros]

Hi,

authorization object S_TCODE allows you to control access to transaction. So if there is any role which should not have access to same aprticular transaction then you have to update that role. In other words if there is a mess then you need to clean it up.

Cheers

[Former Member]

Thank you Martin!

[Former Member]

Hi Lakshmi,

Regarding your question, you need to check which roles has assined as V* under S_TCODE , you need to remove VK11 from that and you need to give the range accordingly.

Hope this information helps.

thanks!

Regards,

Pavithra.B

[Bernhard_SAP]

...just a thought: copy VK11 to (for instance) ZVK11 in se93. Lock vk11 in sm01. Create a role only with s_tcode=zvk11. Assign that role to that limited number of users. b.rgds, Bernhard