How to give SPRO access to new user

[Former Member]

Hi ,

How to give SPRO access to new user

[Former Member]

hi,

As a starting point, your SPRO display role should S_PROJECT auth object

with display only, S_PROJECTS auth object with activity 01, SM30/SM31,

S_TABU_DIS with activity 03 and every other authorization object with

display-only access.

Depending on the IMG nodes you'd like to display, building such a role

may take a while.

If you need access to all nodes in SPRO, I suggest you create a new

Customizing role in PFCG (based on an existing IMG view) and then modify

the authorization objects to display-only:

- PFCG>Create>Menu Tab>Utilities>Customizing Auth>Add>IMG

Project view.

________________________________________________________________

You cannot make SPRO 100% display only by ANY setting. The SCC4 option only turns configuration tables to not-modifyable but still allows the non-config delivery class tables (or those configured to be changeable) to be modifed. It does nothing for the tcodes that are NOT table maintenance and not controlled by S_TABU_DIS. These will still allow configuration. All the tcodes in the SPRO are in several tables CUST_ACTOBJ (spelling?) is one.

You only real option is to create a role with all the tcodes in them that are in the SPRO , remove the create and change to display ( generally by changing the last nunmer on the 4 digit tcodes to 3) and removing all the Create and change access in all the activities and allow only the display.

PFCG allows you to create a role from a SPRO project so the usermenu will come close to the SPRO menu, which your changes it will be display.

[Former Member]

Thanks for your help

[Former Member]

Hi Sri K,

please give your mail id . Thanks a lot

[Former Member]

Hello Venkata,

Sri would only post his real email ID here if he were a fool.

Besides, you want Sri to contact you... => So the correct way is to share your email ID using your SAP SDN Business Card, (click on "My Profile"...) and then it is up to Sri to contact you or not if you request it. Or better said, you make an offer that he can contact you if he wishes to do so.

What happens after that is your own responsibility if your want to go "offline".

Cheers,

Julius

[Former Member]

You can contact me at <b><removed by moderator></b>.

[Former Member]

you can contact me at <b><removed by moderator></b>

Message was edited by: Moderator

[Former Member]

Creating SPRO Display only.

You might be asked to give SPRO display while implementing your SAP. Igenerally give these authoriztion to make it display only. Please test it.

Object Field Value

S_PROJECT PROJECT_ID *

S_PROJECT PROJ_CONF *

S_RFC ACTVT 03

S_RFC RFC_NAME *

S_RFC RFC_TYPE *

S_TABU_CLI CLIIDMAINT '

S_TABU_DIS ACTVT 03

S_TABU_DIS DICBERCLS *

S_TRANSPRT TTYPE Deactivate or remove PIEC and TASK

S_CODE REMOVE SPRO