Hi,
For the display all authorisations you can use the standard role sap_all_display as a reference role.
you can copy this role to new role and you can use.
one more thing is also ther create a role as per your requirement but you have to maintain the authorisation objects of that transactions with activity 03.
Eg: if i want restrict one user for the transaction SU01.
then i have to restrict the authorisation objects of the SU01.
s_user_grp is a major authorisation object. if i maintain the activity 03 for the object then su01 will work for only display.
Hope it will help for you.
Regards,
Srini
