PFCG U ser Comparison

[Former Member]

We recently changed authorization to our existing users, we took out tcode PFCG to the user that assigns roles. However, gave them access to tcode SU01 to assign roles, but when he goes to do user comparison he gets a message that reads "No Authorization to PFCG" I tried giving him access to authrzation object S_USER_GRP but it did not work.

I stehre a way to do such authorzation without giving autjorization to PFCG? or restrict the access to PFCG to just be able to di user comparison?

Regards,

Frank

[Former Member]

Hi Frank,

You can perform user comparison from Tcode PFUD as well. Try creating a role having access to Tcode PFUD and perform the same activity.

Also you can schedule a background job instead of doing it manually each time. Try to search this forum with key word "PFCG_TIME_DEPENDENCY" for more details on this backgroud job.

[andrea_brusarestelletti]

Hello,

check also the SAP library under Identity management, at this link you shoul find explanations regarding the set up of administrators with different tasks in user, profile and roles administration:

http://help.sap.com/erp2005_ehp_02/helpdata/en/52/671595439b11d1896f0000e8322d00/frameset.htm

"Identity management --> User and Role administration of AS ABAP --> Configuration of user and role administration --> First installation procedure --> Setting up user and authorization administrator".

Best regards,

Andrea

Edited by: abrusa on Feb 22, 2010 5:08 PM

Edited by: abrusa on Feb 22, 2010 5:11 PM

[Former Member]

Actually, you can even activate a simple customizing setting which ensures that the user comparison can only be run from PFUD. Or, stated more correctly, only users with authorization for transaction PFUD can run the compare from anywhere you choose.

Cheers,

Julius