04-01-2014 8:53 PM
Hi,
I have a requirement to modify multiple of roles with one transaction code.
We have transaction code ex: xxxxxx exists in around 40 roles, but we replace xxxxxx with another t-code ex:*******
How can I replace the old t -code with new t-code in all roles?
Is there any smart way of doing it? or Do I have to change each role?
Please suggest.
Many Thanks.
04-02-2014 2:11 AM
Hi Basis Lady
Are the other 39 roles derived roles or do you have 40 single roles?
If 40 single you will need to maintain them to adjust the authorisations for each
We have transaction code ex: xxxxxx exists in around 40 roles, but we replace xxxxxx with another t-code ex:*******
As an aside - sounds like you might want to review your security design and role build to simplify unless they are derived roles.
Regards
Colleen
04-02-2014 2:11 AM
Hi Basis Lady
Are the other 39 roles derived roles or do you have 40 single roles?
If 40 single you will need to maintain them to adjust the authorisations for each
We have transaction code ex: xxxxxx exists in around 40 roles, but we replace xxxxxx with another t-code ex:*******
As an aside - sounds like you might want to review your security design and role build to simplify unless they are derived roles.
Regards
Colleen
04-03-2014 11:44 AM
Hi Lee,
Thanks very much for your reply.
in that 40 roles, there are 8 Master roles and remaining are derived from these.
And If removing one single t-code from many roles is a pain and taking up too much time .
Then Is it possible is creating a new role to explicitly deny access to that t-code and add that to everyone.??
04-03-2014 11:50 AM
So you have 8 roles to maintain directly and then propagate changes to the derived
no - security in sap doesn't do exclusion (except for p_pernr object)
have you supported security before?
regards
Colleen
04-03-2014 12:06 PM
Thanks for advising on this. No, I haven't completely supported security earlier.
I am a basis person currently lookin to secuity issues too as no special resource available for this.
04-03-2014 12:09 PM
Recommend you read up on imparting verse derived and if you are doing more security look at ADM940 course
04-03-2014 12:19 PM
Couldn't agree more about the training course. Trying to support SAP security without a solid understanding of how it works is not sustainable for long (or indeed, at all).
Steve.