Restricting SPRO from SAP_ALL

[Former Member]

Hi,

How can i restrict only SPRO from the complete sap easy access menu.

Yours'

Rahul

[former_member204746 · Accepted solution]

to get a valid response from security gurus, try the SECURITY forum at

[Former Member]

hi,

you can deactivate authorization object s_img_actv

hope it will work.it only shows display but no authorization for change IMG.

thanks

jagat kaushal

[Former Member]

Hi Good day,

I know what you are saying but if im asked to work on a scenario like this in terms of security how can i resolve it.

Thanx & regards,

[Former Member]

Hi Rahul,

Go to tcode sm01 and then type spro select and lock the particular tcode.

Hope it solves your problem.

Cheers

Deepanshu

[Former Member]

Never assign a user to SAP_ALL who you do not want to have full authorizations in the system.

Create a role with only the authorizations these users need, it will save you a lot of headaches in the future.