In an environment of derived roles ; a user is asking for a
t-code ; which is not found in suim in search of roles ?
what will u do ?
Answers were Sorted based on User's Feedback
1.check if the tcode exists or not.
2.try to search the role with S_tcode and then putting the
tcode in "roles by complex selection criteria"
3.you should at least get SAP standard role which should
not be assigned.
----------------------------
So after doing all these you are not able to find any end
user role available in system.
Nxt step is the proposal of adding the tcode to a suitable
role.
as it's a derived role envi---> need to add the tcode in
template / parent role
take approval from BPR/role owner for role modification.
they will decide which parent role to change.
change role [by adding the tcode]in Dev and transport to
rest of the sys in landscape
Is This Answer Correct ? | 6 Yes | 1 No |
Answer / gaurav
1> You'll need to check if the transaction that is being
requested is available in the system i.e if it exists or
not. You'll have to check this thru transaction SE93.
[If not then the ABAP team needs to get this transaction
coded into the system]
2> If transaction does exists and if you are not able to
find this in any production/ end user roles, then you'll
have to see if you can find any ViewName/ Table Name linked
to this transaction [this would be on the same screen i.e.
SE93 at the bottom]
3> If a ViewName is available then this means that this new
transaction will be interacting with the table you found
and hence the object S_TABU_DIS and SU24 change will come
into picture.
4> You then need to take a trace yourself in Development
system by executing this transaction and check the trace
report for the activities that show up.
[Note: Remember to undo whatever you have saved]
5> Take appropriate approval for role modification as per
process you follow in your organization.
6> Make SU24/ role changes in development system and have
these changes moved till Quality or Fix system for testing
purpose. Create test ID's accordingly.
7> If testing fails, get SU53 report and redo analysis. If
testing is successful create production/ end user roles,
make a TP request and get your changes moved till
production system.
Is This Answer Correct ? | 7 Yes | 3 No |
Answer / sandy
first of all check with role owner whether the user has
permission for that t_code. If no role is found with that
t_code create a new role with that t_code and assigned to
that user after permission from role owner.
Is This Answer Correct ? | 2 Yes | 0 No |
What is mean By Start Profile, Default Profile, Instance Profile ? What is difference between these ?
How we can see FFID log report, before any prerequisite?
Hello!!! We are asked to generate a report/collect data on users concurrently accessed to the system and what operations they performed with their concurrent access. Apart from they want info on the duration of thier concurrent/normal session (date, time etc). Can anyone help us to know any particular transactions (as of our knowledge STAT & STAD can render certain segment of data), reports available with SAP to collect the above requested info.
Is it possible to assign two roles with different validity period to a user in one shot through GRC? If yes, how
When would you update a sap table directly?
what is use of su56?
What is the maximum number of authorization objects in a role?
Which transaction should not be given to BASIS and DEV team in Production?
How can you find all t-codes which are locked in the system ?
where v creat auth group
hOW many users limit in su10
3 Answers Accenture, Cap Gemini, Hexaware,
what are ticketing tools?