one tcode,say sa38, is assigned to 10 diffrent users
through a same role.I want to restrict one of those 10
users to execute only a few reports in sa38 but not all
reports.what are the possible ways of getting it done?
Answer Posted / rax
Hi all,
Generally all roles (containing t-codes) are planned and
created depending on an individuals position (ex- sales mgr)
during implementation. So, the above situation never arises.
According to me this question is just to know the
interviewee's knowledge....
For this particular scenario the answer would be ....
The end user to access reports or programs he needs to have
access to authorization object S_PROGRAM. So,we first
manually add this authorization object to his existing role.
This object has an authorization field called AUTHORIZATION
GROUP in which we can maintain all programs or reports he
has to be given access to....
| Is This Answer Correct ? | 3 Yes | 4 No |
Post New Answer View All Answers
What does the account assessment category specify in a purchasing order in SAP Materials Management?
What is the procedure for role modifications?
What are the different types of sap security tables?
What are the upgrades happened in GRC 5.3 from GRC 5.2?
what are all the questions covered in "profiles related concepts " please let me know ?
What are su22 t-codes used for?
what is sod in sap security?
Any details about secatt apart from SAPSecurity online.com?
Can you explain document transfer-level security?
Explain protecting public keys?
What authorization is required to create and maintain user master records?
How to add custon t-code to a role and how to find the auth obj of custom t-code.if the custom t-code doesnt have auth obj, will you save and generate the role?
Which t-code can be used to delete old security audit logs?
Differentiate between saml token profile and a sap logon ticket
Can you explain internet-level security?