Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

How to restrict T-Code SPRO, which only allow user to perform configuration in IMG with no access to sensitive HR Master Data.

Former Member

‎02-06-2013 4:16 PM

0 Kudos

Dear all,

May I know how can I create a configuration role with T-Code SPRO, which allow user to perform configuration in IMG but not allow to access to sensitive HR Master Data. This role will be assigned to the Data Migration Team for data loading before go-live.

Thank you.

With regards,

DERRICK

2 REPLIES 2

Former Member

‎02-06-2013 9:22 PM

0 Kudos

Are they going to be expected to migrate "sensitive" HR master data as well?

Which tool you are using for migrations will also determine which access that tool provides to migrated data....

For SPRO you can use SPRO_ADMIN for creating views and import these into role menus, then use report RSUSR008_009_NEW or GRC or your own inventions to scan them for HR access in what the project generated for proposals.

Cheers,

Julius

Former Member

‎02-08-2013 10:13 AM

0 Kudos

Can you try in auth object S_TABU_DIS  remove values for  field  "Authorization Group" starting with p.Dont leave any * there