Security admin roles

[#1]

The user wants to know all authorizations and corresponding transaction codes required to add the security officer role to SAP consultants.

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

First of all check the SAP Note 1154550 - Standard roles for support tasks

Security relevant roles:

SAP_BC_SEC_AUTH_DISPLAY    1117656    BC-SEC-AUT-PFC
SAP_BC_SEC_AUTH_ADMIN    1117656    BC-SEC-AUT-PFC
SAP_BC_SEC_USER_DISPLAY    1117656    BC-SEC-USR-ADM
SAP_BC_SEC_USER_ADMIN    1117656    BC-SEC-USR-ADM

Also refer to SAP Note 1117656 - Roles for support tasks for component BC-SEC-USR/AUT

Also read the general recommendations in the SAP Note ##1154550 & ##1117656 like the below ones:

• The use of SAP standard roles is voluntary.
• You should never use standard roles directly, but always in the form of a copy in the customer namespace. This applies particularly if you change the role.
  Otherwise, you may lose data as soon as SAP delivers a change via Support Package.
• You can usually change the contents of the role to meet your own requirements. However, note that SAP is unable to take any responsibility for unwanted effects that result from changes of this type.