Access to only one custom table

[Former Member]

How to provide access to one custom table to end user.

[Former Member]

Best way is to create a custom parameter transaction in SE93 and define the table you want access to. Then go into Su24 and define the table auth group for that table so when you set up in PFCG the correct values will be defauted. Remember to "skip initial screen" when setting up custom tcode.

Edited by: JC on May 14, 2008 3:54 PM

[Former Member]

JC,

When i create a custom tcode and keep this custom table under this tcode and then insert this tcode in any user roles....then what is the necessary of auth group again? and also we create auth group in su24??? or se54/SE11 ???

Thanks,

Lisa

[Former Member]

Use SE54 to find the auth group - assuming it is an SAP delivered table - and then update the value in SU24. If it is custom table then you could have put in an auth group in SE11 or if you want you can create custom auth groups in SE54 and then assign it in same place. The custom auth group is not as critical since you are using a tcode to define access - ie. you could just have one custom auth group for all your custom tables and ensure unique access via the custom tcode.

Edited by: JC on May 14, 2008 4:11 PM

[Former Member]

Lisa,

Associate the group created to the specific table via SE11 transaction. Then just grant access to the user to transaction SE16 + object S_TABU_DIS, ACTVTs 02 and 03 with DIBERCLS = (the table group you just created).

Regards,

Lucas

[Former Member]

If you grant access to SE16, then the user will have access to all tables within the auth group.If you have a lot of custom tables and you only want to assign access to one table at a time, then you will end up creating lots of custom auth groups.

Also the end user will likely need access to other SAP table auth groups as well so if you have given access to SE16, then you have allowed access to all those other tables as well.

[Former Member]

JC,

What we have to update in SU24 ?

[Former Member]

Hi ,

1. First you create Authorization group using txn SE54 and assign your customized table to this group using same txn or you can use SE55 txn.

2. Assign your authorization group to authorization object that is S_TABU_DIS using PFCG txn..

Siva

[Former Member]

Once you know the table auth group associated to your custom tcode you can assign this in SU24. In SU24, just enter the custom tcode and then you will need to add the auth object S_TABU_DIS. I would just default the value for DICBERCLS for the table auth group. This way whenever you add the custom tcode to a role it will default the table auth group and you can decide whether you want change or display activity.