04-20-2010 4:35 PM
Hello Gurus,
I'd like to know if it's possible to give access to the PFCG transaction in display mode only.
Is this driven only by the activity in S_USER_AGR or is there some other authorization object?
I can't find any thread here that is directly related to my question, but I'm surprised that this hasn't been asked here before...
04-20-2010 6:27 PM
Sebastian,
You can have a display version of PFCG. Just ensure that the following Authorizations are "03/08 - Display" activities when you create the role. Its good to have this version in Production to not allow changes to profiles/roles directly. You will need to ensure that
S_TCOE = 'PFCG'
(Display Only)
Authorizations: Role Check S_USER_AGR
User Master Maintenance: Authorizations S_USER_AUT
User Master Maintenance: User Groups S_USER_GRP
User Master Maintenance: Authorization Profile S_USER_PRO
Authorizations: Transactions in Roles S_USER_TCD = 'PFCG'
Authorizations: Field Values in Roles S_USER_VAL = 'Full Access'
Try that.
Thanks,
Matt
04-20-2010 4:44 PM
Sorry, but i would think it is faster to create a role and test, than to wait for a answer on the forum
04-20-2010 5:21 PM
Sorry but if I could, I would
And your "answer" could be said to any other message here anyway...
04-20-2010 10:44 PM
> And your "answer" could be said to any other message here anyway...
Adding to the "chaff" doesn't help.
04-20-2010 6:27 PM
Sebastian,
You can have a display version of PFCG. Just ensure that the following Authorizations are "03/08 - Display" activities when you create the role. Its good to have this version in Production to not allow changes to profiles/roles directly. You will need to ensure that
S_TCOE = 'PFCG'
(Display Only)
Authorizations: Role Check S_USER_AGR
User Master Maintenance: Authorizations S_USER_AUT
User Master Maintenance: User Groups S_USER_GRP
User Master Maintenance: Authorization Profile S_USER_PRO
Authorizations: Transactions in Roles S_USER_TCD = 'PFCG'
Authorizations: Field Values in Roles S_USER_VAL = 'Full Access'
Try that.
Thanks,
Matt
04-21-2010 2:20 AM
@Julius: I only have a basic knowledge of Authorizations (I`m in BW) and our security consultant wasn`t available today so I was just wondering if that was possible or not. I usually find the answers to all my questions by searching on SDN, but I couldn`t find anything on this matter, so that`s why I asked here -
@Matthew: thanks a lot for your answer. That`s exactly what I was looking for.
02-26-2013 4:32 PM
04-20-2010 8:26 PM
Where did you get stuck?
Should the user also be able to use the
menus?
Should they be able to use F4 display on all the tab's fields?
You need to provide more information.
Cheers,
julius