How to edit a profile copied from SAP_ALL profile

[Former Member]

Hi All,

I tried to create a new profile by copying it from the SAP_ALL profile. Now I want to edit the authorizations of the newly created profile. But I am unable to find a way to do this. Can anybody please let me know the way to edit such profiles which are created by copying from SAP_ALL profile???

Thanks and Regards,

Khyoom

[Former Member · Accepted solution]

Hello Abdul,

Please go SU02 and give the copied profile. Press enter and then go to change mode.

Now you will get a list of sub profiles.

Actually you need create copies of each of these profiles. Then inside profiles you need to create copies of atuhorizations only then wil you able to do modifications.

Why are you using profiles anyways. Profiles should rarely be used and more or less are obsolete entity in terms of general usage unless we are talking about super users.

Create a role and insert SAP_ALL authorizations in it.

For this go to PFCG. Create a role. Then go to authorizations tab in change mode and select expert mode for profile generation.

Now you will get a pop up . Choose don't select any template.

The Edit->Insert Authorizations->Fulk authorizations.

Now generate the role for once.

Now you have a role with SAP_ALL authorizations. Change it according to requirements and then assign it to users.

This is much simpler.

Please award points for useful answers.

Regards.

Ruchit.

[Former Member · Accepted solution]

Hi ruchit

thanks. i was looking for same thing

[Former Member]

HI Abdul,

To chage the profile you have to follow the following procedure.

In the Chnage Role:Authorizations window choose the node you want to edit.

Let us take the you want to edit the Basis:Administration Node.Now expand that node and mark inactive the authorization object that you want the user should not have access to.In this way you can create the role with desired mentioned autorization.

Now save the role and click on the generate button to generate the profile.

Reward points for helpful answer

Best Regards

Amit

[Former Member]

HI,

Run Tx Su02..

Regards

Umesh K

[Former Member]

Hi Abdul,

Directly maintaining the profile is not recommended by SAP since release 4.x.

The best way to maintain the authorization is 'role'.

Regards