Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

PFCG transaction in display mode only

sbastien_francal2
Active Participant
0 Kudos

Hello Gurus,

I'd like to know if it's possible to give access to the PFCG transaction in display mode only.

Is this driven only by the activity in S_USER_AGR or is there some other authorization object?

I can't find any thread here that is directly related to my question, but I'm surprised that this hasn't been asked here before...

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Sebastian,

You can have a display version of PFCG. Just ensure that the following Authorizations are "03/08 - Display" activities when you create the role. Its good to have this version in Production to not allow changes to profiles/roles directly. You will need to ensure that

S_TCOE = 'PFCG'

(Display Only)

Authorizations: Role Check S_USER_AGR

User Master Maintenance: Authorizations S_USER_AUT

User Master Maintenance: User Groups S_USER_GRP

User Master Maintenance: Authorization Profile S_USER_PRO

Authorizations: Transactions in Roles S_USER_TCD = 'PFCG'

Authorizations: Field Values in Roles S_USER_VAL = 'Full Access'

Try that.

Thanks,

Matt

7 REPLIES 7

Former Member
0 Kudos

Sorry, but i would think it is faster to create a role and test, than to wait for a answer on the forum

0 Kudos

Sorry but if I could, I would

And your "answer" could be said to any other message here anyway...

0 Kudos

> And your "answer" could be said to any other message here anyway...

Adding to the "chaff" doesn't help.

Former Member
0 Kudos

Sebastian,

You can have a display version of PFCG. Just ensure that the following Authorizations are "03/08 - Display" activities when you create the role. Its good to have this version in Production to not allow changes to profiles/roles directly. You will need to ensure that

S_TCOE = 'PFCG'

(Display Only)

Authorizations: Role Check S_USER_AGR

User Master Maintenance: Authorizations S_USER_AUT

User Master Maintenance: User Groups S_USER_GRP

User Master Maintenance: Authorization Profile S_USER_PRO

Authorizations: Transactions in Roles S_USER_TCD = 'PFCG'

Authorizations: Field Values in Roles S_USER_VAL = 'Full Access'

Try that.

Thanks,

Matt

0 Kudos

@Julius: I only have a basic knowledge of Authorizations (I`m in BW) and our security consultant wasn`t available today so I was just wondering if that was possible or not. I usually find the answers to all my questions by searching on SDN, but I couldn`t find anything on this matter, so that`s why I asked here -

@Matthew: thanks a lot for your answer. That`s exactly what I was looking for.

0 Kudos

Former Member
0 Kudos

Where did you get stuck?

Should the user also be able to use the

menus?

Should they be able to use F4 display on all the tab's fields?

You need to provide more information.

Cheers,

julius