Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

a complete read only authorization

Former Member
0 Kudos

Hi all,

Do you know of a standard authorization to give a user a complete read-only authorization? Kind of like "sap_all" but only to read?

Thanks,

Samer

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Hi Sameer

You dont have any profile as read only.

You have to adopt reference SAP_ALL as template and you have to change all the values to 03 so that it can be display only.

Thanks and Regards

Arun R

9 REPLIES 9

Former Member
0 Kudos

Hi Samer,

There is no such standard authorization like SAP_ALL with read access only.You would have to create one.There are several threads related to this.Please search for it in the forum.

Thanks,

Saby..

Former Member
0 Kudos

Hi Sameer

You dont have any profile as read only.

You have to adopt reference SAP_ALL as template and you have to change all the values to 03 so that it can be display only.

Thanks and Regards

Arun R

0 Kudos

Hi all,

Thank you for your posts, i just have one more question. After I created the new profile and adopted SAP_ALL, i'm not sure where I should change all the values to 3. Where are these values?

0 Kudos

It is very difficult to explain it in one shot. You need a magic training which I think is taught in a course called ADM940.

0 Kudos

Hi Sameer

You can not change all the values of the activity to 03 at one shot but you need to go in manually to individual authorisation object and identify the display options.

As Julius suggested some authorisation object would have other than activity. We need to identify what exactly the need of that corresponding authorisation object and provide the value.

Thanks and Regards

Arun R

Former Member
0 Kudos

This message was moderated.

Former Member
0 Kudos

Use the search for SAP_ALL_DISPLAY. This has been covered a few times before

You can create wide access display roles but you need to be careful as there are plenty of auth objects with display activities which are not only 03.

0 Kudos

thank you all for the good feedback

Former Member
0 Kudos

There are also many fields of objects which are "action" or "activity" related, but they are not the ACTVT field.

For some of them, the NAME field will determine whether the user can display or change.

In other special cases, the program context will determine the activity (field PROGRAM) as the different "programs" of the same object do different things.

Good luck!

Julius