Security issue: Administration

[Former Member]

I want to assign a user with one role,

and role with only 2 tcodes, (su01 only display) an (pfcg full authorization) and I am unable to do it,

[Former Member · Accepted solution]

Hi

To create a role with two tcodes only follow these:

- Create a single role in PFCG.

- Go to Tab "Menu"

- Click on "Transactions". Add the tcodes PFCG and SU01.

- Save the Role

- Generate the authorization profile.

- Click on "Change Authorization Data"

- Maintain the Authorization Values

- Check that you have SU01 and PFCG in S_TCODE.

- Save and Generate.

[Former Member]

Hi,

1. Create role with starting letter Z, ex: Zrole1 using by tcode PFCG.

2. Then assign SU01 and PFCG tcodes for Zrole1 and save it.

3. After this, Generate it.

4. Now you can open Zrole1 in PFCG, Check authorization Object and aslo click on this.

5. Give Display authorisation for SU01 and also Full authorisation for PFCG.

6. Then Save and generate it.

7. Finally you can add Zrole1 to any user.

Regards,

Srini Nookala