04-18-2008 9:17 PM
Hi Friends,
I know this is a not a proper request but still as management agreed I have to implement this.
Requirement - Few senior users requires SAP_ALL authorizations profile with DISPLAY only access
Could you please sugget how to proceed with this ?
Thanks,
Sam
04-18-2008 9:40 PM
This is an often aksed question (though not lately for some reason) and there is no real answer, just a technical labyrinth...
1st counter-question: Which release are you on?
04-19-2008 8:30 AM
Hi Sam,
As Julius said, there is loads of info if you use the search.
Furthermore are your management aware of the risks associated with trying to do something like this? The second you combine a display variant of SAP_ALL with an end user role then you effectively destroy a whole load of controls which are introduced via the standard authorisation concept.
Cheers
Alex
04-21-2008 1:14 AM
We are in ECC6 with SP11, Operating System - HP UNIX, Database - Oracle 10 g
Yes, I saw few forums but couldn't find any complete answer. Could you please let me know if you already done these (or) you got the complete answer
I already explained the risks to the management but they still want to go with this
04-21-2008 12:26 PM
>
> We are in ECC6 with SP11, Operating System - HP UNIX, Database - Oracle 10 g
>
> Yes, I saw few forums but couldn't find any complete answer. Could you please let me know if you already done these (or) you got the complete answer
>
> I already explained the risks to the management but they still want to go with this
Hi,
I have done this a few times.
There have a few detailed sets of instructions how to do these, posters who have provided these include (from memory) Jurjen and Auke Visser