Interested to Buy Any Domain ? << Click Here >> for more details...
we have one parent role and we derived five roles from that
and i assigned these derived roles to five users now i want
to restrict 2 users for couple of T-codes and rest of the
users work with those T-codes , How we can solve the problem
- 8 Answers
- 16426 Views
- Cognizant, I also Faced
- E-Mail Answers
Answer Posted / sumeithmn
We can change the Authorizations of those 2 specific derived roles by removing the desired tcodes and generate. But this actually defies the derived - template roles concept.
Also, whenever the template role is modified for some reason i future, and if the change is inherited via the template role, then the 2 specific derived roles will lose all the changes made to them (as above) and will get the same auths as the template role again.
The only solution in this case is to not derive all roles from the template role after template roles modification, but to derived individually each of those 3 derived roles, and make the changes exclusively to those 2 derived roles. This is possible but proposes a very weak and unnecessary overhead task for Security administrator.
| Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers
Can you explain network topology in sap systems?
Userdone tasks with ffid n system send log reports to controller in his work inbox but whenever its open its showing blank screen, why?
How do you check background jobs?
You wan to transport user groups from transaction sugr? Would this impact the groups tab in su01? What would you do?
what is use of copy data in derived role and when we use this one ???
Can you explain transport system-level security?
When would you update a sap table directly?
What every changes done exist role in development system that changes are not reflected in quality system, but transport is successfully moved?
Giving fire call access and extending fire call access by using VIRSA’s VFAT tool.can any one brief this
What does the pfcg_time_dependency clean up?
The user wants to create like a time table in BEX but when the open BEX its showing empty screen . in this situation what will u do.. And How will solve u …What r the steps u will take the to solve the solution..
In Agr_1251 we are able to see 100 roles but in SUIM we are able to see 120 roles what's the reason behind this ? why is the difference between the SUIM and the AGR table ?
what is analysis authorization in sap bi and how to create analysis authorization in sap bi?
What is use of derived roles?
What is sap’s grc?
