Profile or role , which provides display only access to R/3 system .

[Former Member]

hi,

Is there any profile , which provides display only access to all the modules in R/3 system .

Thanks

Bharat

[Frank_Buchholz]

Hi Bharat,

such a role does not exists.

You can create it by yourself - but it's not a simple job.

Try this:

1. Create a new role ZDISPLAY_ALL

2. Navigate to "Change authorization data"

3. Do not use a template

4. Edit -> Insert authorizations -> Full authorization

5. Goto -> Organizational Levels -> Full authorization

6a. Find -> Find Field -> Field name ACTVT

6b. Modify all entries for this authorization field (Remove "*", enter "03")

In an ERP system you get approx. 1000 entries...

(By the way: The authorization values of roles are stored in table AGR_1251. I do not recommend to modify that table directly but at least you should not insert or delete entries and you should not touch the counter field.)

7. Repeat 6a.+6b. for other activity fields like these: ACTIVITY CO_ACTION FM_AUTHACT IMG_ACTIV IM_ACTVT JOBACTION PPFCODE PS_ACTVT P_ACTION SPOACTION STMSACTION S_ADMI_FCD WFACTVT

8. You may want to deactivate authorizations for authorization objects having a name starting with an "S"

9. You may want to restrict S_TCODE for not giving authorizations for transactions having a name starting with an "S".

Enter the following authorization values (It's a little bit tricky to enter correct values for a range. Using these patterns works fine.):

A*

A - R

R*

T*

T - Z

Z*

0*

0 - 9

9*

Kind regards

Frank Buchholz

[Former Member]

Hi Frank,

I know that you said that it doesnt exist, but is it possible for SAP to supply such a suggested base role for display_all (with a disclaimer is also fine ). In addition to some comparisons of which fields are actually used for something actvitiy related... it would be a huge basic help if customers could could start with a <b>base role for display (please amend if required)</b>.

This would be MUCH better than the current assortment of roles + SAP_NEW which many display seeking users end up with.

Cheers,

Julius

[Former Member]

Check this thread -

Display Only Access Role