Assign transaction to a user

[Former Member]

Hi,

I am not much experienced authorizations. I am trying to give authorization to a user for a particular transaction. I guess I have to do that in some PFCG....I am sure this is a simple thing...but can some body refer me to any documentation or just list out the steps?

Thanks.

[jurjen_heeck]

> I am sure this is a simple thing...

Ah, that's why the ADM940 course only takes three days

I suggest you go to the SAPhelp pages at www.saphelp.com and search for PFCG.

[Former Member]

Hi Visu,

The steps to add a txn to a role are as follows:

Go to PFCG

Enter the name of the role where the specific t-code is to be added.

Click on change

Go to the menu tab

Enter the txn in the add transaction tab

Go to the authorization tab

Click on change

Maintain any open authorizations

Save and generate the profile

Assign the role to the user from the user tab.

Thanks,

Saby..

[Former Member]

Rather suprising question actually...

Is there no application help in the area in which you work?

Start PFCG => via the menu choose "Help" => "Application Help".

Or help.sap.com => choose your release => and search for "PFCG".

Often we delete such questions (for lack of using the search)... but as this exact one has not been asked before, we can leave it for those who use google...

Cheers,

Julius

[Former Member]

Here are some excellent resources on how to use transaction PFCG and assign authorizations to users.

Always remember, assign the USER to the ROLE. This is a good habit, rather than assigning ROLES to USERS.

Hope this helps!

http://sap.mis.cmich.edu/46c-help/helpdata/EN/23/07d128f31011d296330000e82de14a/content.htm

http://help.sap.com/saphelp_nw70/helpdata/en/52/6714a9439b11d1896f0000e8322d00/content.htm

http://help.sap.com/saphelp_sm40/helpdata/EN/57/3fc0413f1b6524e10000000a1550b0/content.htm

http://searchsap.techtarget.com/tip/0,289483,sid21_gci912389,00.html

[jurjen_heeck]

> Always remember, assign the USER to the ROLE. This is a good habit, rather than assigning ROLES to USERS.

Please tell me more about this one, I fail to see the difference.

[Former Member]

This surprises me also !!

[Former Member]

I guess there is a possible tactical advantage in that you would not need to give the person authorized to only assign roles and their validity dates access to SU01 in change mode, but rather (with a bit of a tweeak of PRGN_CUST only need actvt 22 or S_USER_AGR & GRP.

In large organizations or decentral role-assignment-only it can be usefull.

Cheers,

Julius