Restrict all users from a tcode

[#1]

Hi,

I would like to restrict all the users which are having the Tcode - DHCDCMON but I want to keep 1 user out of restriction.
Can anyone suggest me what steps I can follow as an SAP Security person?

Thank you!

[Lakshmipathi · Accepted solution]

If you want to restrict transaction DHCDCMON for all users except one, you don’t need anything complex. You just need to control the authorization object(s) behind that transaction.

• Remove the authorization for DHCDCMON from all general roles.
• Create a dedicated role that contains the authorization for DHCDCMON.
• Assign that role only to the one user who should retain access.

This way, only the designated user can execute DHCDCMON, while everyone else is restricted.

[anurag_vaishnav · Accepted solution]

Hi Lakshmipathi, Thank you so much for the clarification. I would also like to know how we can restrict ABAP programs also for all the users except to keep it for 1.

[olgavlachova]

@anurag_vaishnav You should follow same logic, just restrict ABAP Program via auth object S_PROGNAM, instead of S_TCODE.