SQ01: Pros and Cons for providing an access to End Users

[former_member210731]

Hi All,

We have recently gone live with one of our business on SAP ECC6.0.

and i have been request by the functional users to provide access to SQ01 transaction, since they can generate the adhoc SAP Queries on the fly. without having to write and abap report for the same.

and for the same i wanted to analyse the risk involved in doing the same. As i know with the access to the transaction SQ01 users can create,select,modify and delete any object in the database, and also do have access to SAP developments.

request you all to please help me understand all the pros and cons involved before i can give such an access to my end users.

Thanks a lot in advance.

Thanks & Regards

Mahendra K

[Former Member]

You should be able to restrict access by restricting access to tcodes SQ02 and SQ03. As well, there is query security via the query user groups and auth object S_QUERY so you can give users access to SQ01 and only allow them to certain query user groups and only allow them to execute queries, but not create / change.

[JPReyes]

Hi Mahendra,

I think key users and developers should have access, for the rest you need to be careful,

I found this article interesting

http://www.insightcp.com/res_15.htm

regards

Juan