Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Restriction authorization

0 Kudos
117

Dear Gurus,

Users in our production system have access to t-code se38,se11.

Now we want to remove these authorizations,but these authorizations are provided to the users via diffrent roles and its difficult to track these authorizations.

I want to know that is it possible to create a restriction authorization where we can define the t-code value as 'not equal' and restrict the desired authorization

Please update

Thanks and regards

Tushar

1 ACCEPTED SOLUTION

Former Member
0 Kudos
82

if the transaction authorization given by custome role you have to find that role and change accordingly, there is no short cut.

5 REPLIES 5

Former Member
0 Kudos
83

if the transaction authorization given by custome role you have to find that role and change accordingly, there is no short cut.

Former Member
0 Kudos
82

I agree with Netweaver Expert.

If you are finding it difficult to identify those roles then I suggest that someone on your security team gets training ASAP as it it a very, very basic task to ID roles with those authorisations. You can do it in SUIM or via table AGR_1251 in less than 10 minutes.

Former Member
0 Kudos
82

This message was moderated.

Former Member
0 Kudos
82

This message was moderated.

Former Member
0 Kudos
82

This message was moderated.