07-29-2009 2:33 PM
My requirement is to provide the users with access only to visualize all the customizing done through the transaction SPRO.
The solution adopted was to assign the user with the role SAP_BC_CUS_CUSTOMIZER. However this does not provide the users with the authorization to execute the transactions available in SPRO.
Is there a simpler way to provide the users with the authorization to visualize the transactions available within SPRO without having to deal with all the transactions one by one?
Thank you.
07-29-2009 5:08 PM
That is an SAP generated role and it is not preferred to assign these to users. Also, the SAP roles do not have profiles generated so the transaction would not be executable just by assigning it.
Copy this role to your own namespace such as Z_BC_CUS_CUSTOMIZER and maintain all authorizations and generate profile. This might give you what you are looking for.
07-29-2009 5:08 PM
That is an SAP generated role and it is not preferred to assign these to users. Also, the SAP roles do not have profiles generated so the transaction would not be executable just by assigning it.
Copy this role to your own namespace such as Z_BC_CUS_CUSTOMIZER and maintain all authorizations and generate profile. This might give you what you are looking for.
08-03-2009 7:07 PM
Hi ,
I tried to create a new namespace Z_BC_CUS_CUSTOMIZER but the problem persists as i have to maintain all authorization for all the transactions available within SPRO.
07-29-2009 5:28 PM
Please use the forum search with strings "SPRO" and "display". This has been discussed several times before.
07-29-2009 5:30 PM
If you search with SPRO in Security forum you will get many details on Display specific SPRO authorizations.. please go thorugh them and let me know if you have any confusion then..
Regards,
Dipanjan
07-30-2009 7:51 AM
Hope this would help you...
As a starting point, your SPRO display role should S_PROJECT auth object
with display only, S_PROJECTS auth object with activity 01, SM30/SM31,
S_TABU_DIS with activity 03 and every other authorization object with
display-only access.
Depending on the IMG nodes you'd like to display, building such a role
may take a while.
If you need access to all nodes in SPRO, I suggest you create a new
Customizing role in PFCG (based on an existing IMG view) and then modify
the authorization objects to display-only:
- PFCG>Create>Menu Tab>Utilities>Customizing Auth>Add>IMG
Project view.
08-03-2009 7:13 PM
Hi mohan,
i tried to create a new SPRO display role with all the authorization objects you mentioned. But the problem persists as i still have to maintain the authorizations for all the transactions within SPRO.
I cannot create a role based on an existing IMG view as no project view exists.
08-01-2009 2:23 PM
08-10-2009 12:27 PM
08-10-2009 4:15 PM