In an environment of derived roles ; a user is asking for a t-code ; which is

In an environment of derived roles ; a user is asking for a
t-code ; which is not found in suim in search of roles ?
what will u do ?

Question Posted / c.vamshikri

4 Answers
12089 Views
IBM, I also Faced
E-Mail Answers

Answers were Sorted based on User's Feedback

In an environment of derived roles ; a user is asking for a t-code ; which is not found in suim in..

Answer / subal

1.check if the tcode exists or not.
2.try to search the role with S_tcode and then putting the
tcode in "roles by complex selection criteria"
3.you should at least get SAP standard role which should
not be assigned.
----------------------------
So after doing all these you are not able to find any end
user role available in system.
Nxt step is the proposal of adding the tcode to a suitable
role.
as it's a derived role envi---> need to add the tcode in
template / parent role
take approval from BPR/role owner for role modification.
they will decide which parent role to change.
change role [by adding the tcode]in Dev and transport to
rest of the sys in landscape

Is This Answer Correct ?

6 Yes

1 No

In an environment of derived roles ; a user is asking for a t-code ; which is not found in suim in..

Answer / gaurav

1> You'll need to check if the transaction that is being
requested is available in the system i.e if it exists or
not. You'll have to check this thru transaction SE93.
[If not then the ABAP team needs to get this transaction
coded into the system]

2> If transaction does exists and if you are not able to
find this in any production/ end user roles, then you'll
have to see if you can find any ViewName/ Table Name linked
to this transaction [this would be on the same screen i.e.
SE93 at the bottom]

3> If a ViewName is available then this means that this new
transaction will be interacting with the table you found
and hence the object S_TABU_DIS and SU24 change will come
into picture.

4> You then need to take a trace yourself in Development
system by executing this transaction and check the trace
report for the activities that show up.
[Note: Remember to undo whatever you have saved]

5> Take appropriate approval for role modification as per
process you follow in your organization.

6> Make SU24/ role changes in development system and have
these changes moved till Quality or Fix system for testing
purpose. Create test ID's accordingly.

7> If testing fails, get SU53 report and redo analysis. If
testing is successful create production/ end user roles,
make a TP request and get your changes moved till
production system.

Is This Answer Correct ?

7 Yes

3 No

In an environment of derived roles ; a user is asking for a t-code ; which is not found in suim in..

Answer / sasigopal

Hi,
wonderfull explnation thx.

Is This Answer Correct ?

2 Yes

0 No

In an environment of derived roles ; a user is asking for a t-code ; which is not found in suim in..

Answer / sandy

first of all check with role owner whether the user has
permission for that t_code. If no role is found with that
t_code create a new role with that t_code and assigned to
that user after permission from role owner.

Is This Answer Correct ?

2 Yes

0 No

Post New Answer