SAP Screen Personas Security

[Former Member]

Can we use existing security role to  SAP Screen Personas users or we need to define new role?

[former_member209397 · Accepted solution]

Hi Krishna,

There are two things when it comes to accessing personas

1. Access to flavors

2. Access to SAP transactions

End users should be able to use personas URL and access the flavors only if below are fulfilled on /PERSOS/ADMIN_UI  transaction

a. User should be assigned one of the following Personas Roles

b. Desired flavors should be assigned to the user

But for SAP transactions, users will just inherit the roles that were assigned on SAP GUI.

So there is no need to define SAP roles elsewhere for Personas.

Eg:If the user has access to a particular T-code on SAP GUI, he will have access to the same on SAP Personas.

If user is restricted to use a T-code on SAP GUI, he will be restricted on SAP Personas also.

Hope this answers your question.

Regards,

Geetha

[Former Member · Accepted solution]

Thank you Greetha...

[former_member63222]

What sort of access have you granted to developers to use in development and sandbox to get started.  We just installed this, I have a few pages on security but I dont see the full permission bit numbers in the document I have. I will search for more.  Just wondering what levels you recommend.

[chinthan_yajamaan]

You need to implement note#1869640 in working client to get Personas shipped roles and then assign FULL_EDIT_ACCESS role to users.

Thanks

Chinthan