create a role with everything except parameterization option

[Former Member]

Hello,

We need to create a new role with all object except parameterization

option.

How we can create it?

Best regards,

Julene González

[JPReyes]

Moved to Security forum

[Former Member]

Thank you. Do you know what we do?

[Former Member]

Which parameterization are you talking about here?

[Former Member]

Hi,

We need one rol with all the object except cuztomizing option

regards,

[Former Member]

So you are looking for something like "SAP_ALL without SPRO"?

There have been a number of discussions about this already... please take a look through them.

Cheers,

Julius

[Former Member]

Hi,

yes, that's is exactly what we want. But I don't find any message in this forum with this optionss

best regards,

Julene

[Former Member]

Hi Julene,

Use the search on the security forum for SPRO

Result number 9 looks promising...

[Former Member]

I had no idea that we had discussed SPRO that often...

As you can see from the thread Alex pointed out ( [this one|https://forums.sdn.sap.com/click.jspa?searchID=19779873&messageID=6581648] ) it is also usefull to know which system in the landscape this role is destined for.

Assuming this is for the QAS system, why don't you identify all the business roles for the production system (those which do not permit customizing in production either, nor user admin and other "basis" tasks, nor development work...etc...) and assign them all to the users (I assume these are support users).

They should be in QAS already, and if your client settings are correct (T), you will experience the same or a very similar result.

Of course they won't have "SAP_ALL minus SPRO", but they will have what you are actually using for the "real users"... in production (except it will be in QAS).

That way they have also have a more realistic testing experience with the correct roles (only).

Just a thought,

Julius