Sustainment Roles in Production

[Former Member]

What tcodes are required by the functional and developers in production? For the functional consultants, is it just display of the img and display tcodes of their module(fi/mm,etc..)? Should developers always be allowed access in production? What tcodes will they need? Should both functional and developers be allowed to use tcodes SE38 and SE16?

Thanks in advance!

[former_member74904]

as a general rule one could say that developers have no business in production environments.

functional supportusers would only need display functionality for their respective areas (FI/MM/HR etc.)

why would developers need access in production? will they be developing there?

what T-codes they need is really not an answerable question, as that depends on the situation in your company.

SE38 and SE16 are usually not granted in production environments neither.

[Bernhard_SAP]

Hi JB,

the secuityguides may also be a good starting point for your decisions...

You can find them at service.sap.com/securityguide

b.rgds, Bernhard

[Former Member]

HI JB,

yeah general guide line can be found in sap site.

However, functional needs access in PRD system for support so generally they would require end user display access and Config display access, it all depends how you design the support roles?

and yeah Developers would not really require access, if they do then display access like SA38 and SE17 would suffice.

Thanks and good day

santosh kumar

[Former Member]

Can the SAP Security people have SE16 acces in prod?

[Former Member]

Hi,

SE16 access is not given to security users in production even functional team will be provided with custom transactions for tables which skip the initial screen

(Eg ZSE16_MARA which access only mara table).

Rakesh