Answer / shanu

In that case you need to create and assign authorization
group to report rsusr003. you can also create tcode for
this report and assign it to user in separate role.In the
new role maintain the object S_PROGRAM with specific auth
group.

No need to remove the SA38 from role.

Just make sure the SA38 role should restricted the access
got object S_PROGRAM. It should not be '*'.

Program Check (Object – S_PROGRAM, Values – Execution and
the authorization group).

Answer / naveen kumar

The question is bit logic, you have to create a new role
with tcode SE38 and in authorization object S_DEVELOP the
activities DEVCLASS '*'
OBTYPE '*'
OBNAME ' RSUSR003'
p_group '*'
activity '03'

Answer / ratnadeepika

Hey guys , One more solution is there .

Go to SE93 ...create a new tcode for eg : ZSA38 .

with the option Transaction with parameters option ...

In the main screen Tcode field give SA38 as tcode ...and u
will find 'DEFAULT VALUES" ...Add the entry
Name of the screen field : RS38M-PROGRAMM
Value : RSUSr003 save . If u want u can add some more
values .

Give this Tcode access to the user u want to restrict .

Try it and let me know if u are facing any problems . Mail
me for screenshots .

Answer / subal

Hi,

In that case you need to create a new role for such users.
Remove the SA38 role.
Create a new role with the required reports and assign the
role to the user.

Thus user will loose access to SA38 and get direct access
to required reports eg rsusr003.

Regards,
Subal

Answer / vamshi

screens shot for this as well pls ;

1.What is the difference between Su24,su22,and su21? 2.What are the advantages of GRC in segregation of duties when we compare with virsa? 3.There is one derived role, if i copy the role of derived role will the parent or master role will be the same for the new which is derived from the derived role, if so why if not why? 4. what are the organizational level?

3 Answers   IBM,

Pfcg proposed activities but you need only two. What would you do?

0 Answers  

What are su 24 t-codes used for?

1 Answers  

Q)if u r using 10 firefighter ids at a time? How will the log reports goes to controller? Q)wt is ruleset? and how to update risk id in rule set? Q)wt is the procedure for Role modifications?explain with example? Q)who will done user comparision?

2 Answers  

Does anyone know what kind of questions does the Accenture asks on Interview as SAP Security Consultant?

2 Answers   Accenture,

What is the latest change that was done to the SU53 trace, which is used to find the last authorization failure in SAP..???

4 Answers   IBM, Tech Mahindra,

how many authorizations creates one user ?

6 Answers  

What is sap internet transaction server?

0 Answers  

The system raised a message that authorizations are missing but you have SAP-ALL. What would you do?

3 Answers  

Hi All, We have few users with SAP_ALL profile from 90 days, now i want check what are the transactions they are used till now and i didn’t activate any audit filters in SM19. In this case How can we find?

4 Answers  

How can we Lock transaction ? What happens exactly ?

4 Answers   Patni,

How we Assigning roles to users positions in HR, troubleshoot access issues

2 Answers   IBM,