Create Authorization Profile Manually

[Former Member]

Dear Experts,

I want to know the Tcode through which I can create Authorization Profile.

I know that through PFCG we can create a Role and from there we can generate a Profile, But how can i create a profile without creating a Role.

I think this is possible because the Profile : SAP_ALL does not have a role.

Regards

[GauthamV]

Tcode: OOSP. ( HR related)

Tcode:SU02. (General)

[Former Member]

@Gautham - That doesn't look like the answer that was there at the time I posted my reply

[GauthamV]

After doing some analysis i found the difference between the both, so i thought

it would be misleading to others if i don't change it.

Before i could edit and thank you for the same i got a reply from you.

[Former Member]

Hi,

This is basis Work . Ask the basis guys to create a role for this t-code. After doing that assign the users to that role.

And the SAPL_ALL role can't be assigned to many people.

With Regards,

Sumodh.P

Edited by: Sumodh P on May 6, 2010 3:25 PM

[Former Member]

Hi,

The transaction is SU02, it's in the folder 'Authorisations and Profiles (Manually Maintenance)' under the Role Admin folder in the main menu.

Regards,

Nick

[Former Member]

Tcode through which I can create Authorization Profile

It's actually the task of a SOX or Security Consultant. If you have rights to acess SU02 you can do it.

Go to Profiles------>Create.

Here you can create a profile without a role being generated.

[Former Member]

>

> 
Tcode through which I can create Authorization Profile
> 
> It's actually the task of a SOX or Security Consultant. If you have rights to acess SU02 you can do it.
> Go to Profiles------>Create. 
> Here you can create a profile without a role being generated.

It is nothing to do with a SOX consultant unless that person is also a security administrator.

[Former Member]

>

> 
Tcode through which I can create Authorization Profile
> 
> It's actually the task of a SOX or Security Consultant. If you have rights to acess SU02 you can do it.
> Go to Profiles------>Create. 
> Here you can create a profile without a role being generated.

It is nothing to do with a SOX consultant unless that person is also a security administrator.

[ThomasZloch]

Please post in the correct forum next time (Netweaver Security), ABAP General is not a catch-all box for every SAP related problem.

Thomas

[jurjen_heeck]

> how can i create a profile without creating a Role.

I am curious as to why you would want that? PFCG (the profile generator) is a very good tool which makes creating profiles through roles much easier than the old fashioned way.