Yes, something like that would be what I prefer if there were roles that were module-specific, i.e. a role for CO that contains all CO transactions. Or at profile level.
Hello, as I understood SAP standard roles, they are based on process covered by the user. Gold security rule is "only directly required access rights, not less, not more". We are following jobrole based auth concept, that is similar. My suggestion is to ask requester to provide list of needed t-codes and then use SUIM, etc. The complete only SAP module based role content probably generate Access Risk/s, critical combination of rights that violates SoD rules. From my side it will be a bit tricky so I'd ask "why?". 🤷🏻♀️
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.