02-19-2008 12:29 PM
Hi Everyone,
I Need to Create a Profile which allows "Display access" to the following activities
Configuration (SPRO),
Data Dictionary,
ABAP Workbench and Access to Security,
and "Full access" to Functional Transactions.
What authorization objects need to be included in the profile and how it can be done.?
Thanks all,
-Vinod.
02-19-2008 1:30 PM
search for "display + SPRO" in this forum and you'll find exactly what you're looking for
Edited by: Dimitri van Heumen on Feb 19, 2008 2:30 PM
02-19-2008 1:30 PM
search for "display + SPRO" in this forum and you'll find exactly what you're looking for
Edited by: Dimitri van Heumen on Feb 19, 2008 2:30 PM
02-21-2008 10:04 AM
Hi Vinod,
It would be difficult to assign display and full access simultaneously, in the case when some tcodes access same object.
Instead, create 2 roles, 1st for Configuration (SPRO), Data Dictionary, ABAP Workbench and Access to Security and 2nd for Functional Transactions.
For functional transactions create a blank role and assign tcodes available in menu tree, excluding administration part, this will cover almost all functional transaction tcodes. and all the related object will automatically be populated in the authorization tab and then assign them full access.
Now run suim and list all the tcode present in this new role. and again run suim and list all the possible tcode in sap* or ddic. In the excel list all the tcodes those extra in the sap*. this list will be the list of tcodes having access of Configuration (SPRO), Data Dictionary, ABAP Workbench and Access to Security.
Again create a blank role and assign this extracted list in 2nd new role. again all related objects will be covered here and assign them display access only.
This will definitely help you.
Rgds,
- gaurav