we have one parent role and we derived five roles from that
and i assigned these derived roles to five users now i want
to restrict 2 users for couple of T-codes and rest of the
users work with those T-codes , How we can solve the problem

Answer Posted / rohit

you can't restrict. you have to create another child role and restrict there i.e add/remove t-code as per the requirement. This type of question is asked in interview for creating confusion :)

Is This Answer Correct ?    20 Yes 1 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

Explain protecting public keys?

691


Explain snc in sap security?

717


Can you explain internet-level security?

662


Explain network topology in sap systems?

620


What does the pfcg_time_dependency clean up?

818






What are su56 t-codes used for?

702


what are the pre-requisites that should be taken before assigning sap_all to a user even there is an approval from authorization controllers?

667


What happens to change documents when they are transported to the production system?

1191


What is the main purpose of parameters, groups & personalization tabs?

661


What is use of derived roles?

773


Differentiate between saml token profile and a sap logon ticket

876


What are se10 t-codes used for?

715


What is sap internet transaction server?

713


Is it possible to change role template? How?

690


How to find out who has deleted users in the system?

710