Answer / shanu

In that case you need to create and assign authorization
group to report rsusr003. you can also create tcode for
this report and assign it to user in separate role.In the
new role maintain the object S_PROGRAM with specific auth
group.

No need to remove the SA38 from role.

Just make sure the SA38 role should restricted the access
got object S_PROGRAM. It should not be '*'.

Program Check (Object – S_PROGRAM, Values – Execution and
the authorization group).

Answer / naveen kumar

The question is bit logic, you have to create a new role
with tcode SE38 and in authorization object S_DEVELOP the
activities DEVCLASS '*'
OBTYPE '*'
OBNAME ' RSUSR003'
p_group '*'
activity '03'

Answer / ratnadeepika

Hey guys , One more solution is there .

Go to SE93 ...create a new tcode for eg : ZSA38 .

with the option Transaction with parameters option ...

In the main screen Tcode field give SA38 as tcode ...and u
will find 'DEFAULT VALUES" ...Add the entry
Name of the screen field : RS38M-PROGRAMM
Value : RSUSr003 save . If u want u can add some more
values .

Give this Tcode access to the user u want to restrict .

Try it and let me know if u are facing any problems . Mail
me for screenshots .

Answer / subal

Hi,

In that case you need to create a new role for such users.
Remove the SA38 role.
Create a new role with the required reports and assign the
role to the user.

Thus user will loose access to SA38 and get direct access
to required reports eg rsusr003.

Regards,
Subal

Answer / vamshi

screens shot for this as well pls ;

the company needs to expand its region to another country which the same authorizations had previously what approach you will take

0 Answers  

difference between logon tab and group tab in su10

1 Answers  

How can we maintain Organizational values? How can we create Organizational values? What is the purpose of these Org. values?

2 Answers   Satyam,

in how many roles a T-code exists? Find it without se16 or suim

10 Answers   IBM,

how many authorizations creates one user ?

6 Answers  

What are su53 t-codes used for?

0 Answers  

Whr will u find u Generation logs in BI security and What are Generation logs will come

2 Answers   IBM,

How do I change the name of master / parent role keeping the name of derived/child role same? I would like to keep the name of derived /child role same and also the profile associated with the child roles.

0 Answers  

What is difference between user master record and user buffer

1 Answers   IBM,

Hi Experts, can any one explain me the step by step process to implement security in BI/BW and what are the authorization objects we use to BI/BW , How can the security is different between R/3 and BI/BW, I appreciate your help

1 Answers  

What do you mean by SOX and Gxp?

2 Answers   IBM,

we have one parent role and we derived five roles from that and i assigned these derived roles to five users now i want to restrict 2 users for couple of T-codes and rest of the users work with those T-codes , How we can solve the problem

8 Answers   Cognizant,