Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

hot to restrict sap_all and sap_new

Former Member

‎10-24-2007 12:12 PM

0 Kudos

hot to restrict sap_all and sap_new

2 REPLIES 2

Former Member

‎10-24-2007 12:31 PM

0 Kudos

You can't. They give (almost) full access hence the name SAP_ALL

If the access is too much then build a role that contains the transactions and authorisations that the user/s require

Former Member

‎10-24-2007 2:10 PM

0 Kudos

Hi,

SAP_ALL & SAP_NEW profiles will not be assigned to any users in production environment (Not even to the OSS Users). However, there will be derivatives to these profiles. i.e, these two profiles will be copied and restricted.

Secondly, profile addition will not be done to any user until and unless it is critical. Instead of SAP_ALL, SAP_NEW, other profiles will be assigned like A_ALL etc.,

Have a look at the following link, which may help you:

http://www.learnbasis.com/knowledgebase/index.php?view=ViewArticle&id=29&set=all

Rgds,

Raghu

<b><removed by moderator></b>