Answer / subal

1.check if the tcode exists or not.
2.try to search the role with S_tcode and then putting the
tcode in "roles by complex selection criteria"
3.you should at least get SAP standard role which should
not be assigned.
----------------------------
So after doing all these you are not able to find any end
user role available in system.
Nxt step is the proposal of adding the tcode to a suitable
role.
as it's a derived role envi---> need to add the tcode in
template / parent role
take approval from BPR/role owner for role modification.
they will decide which parent role to change.
change role [by adding the tcode]in Dev and transport to
rest of the sys in landscape

Answer / gaurav

1> You'll need to check if the transaction that is being
requested is available in the system i.e if it exists or
not. You'll have to check this thru transaction SE93.
[If not then the ABAP team needs to get this transaction
coded into the system]

2> If transaction does exists and if you are not able to
find this in any production/ end user roles, then you'll
have to see if you can find any ViewName/ Table Name linked
to this transaction [this would be on the same screen i.e.
SE93 at the bottom]

3> If a ViewName is available then this means that this new
transaction will be interacting with the table you found
and hence the object S_TABU_DIS and SU24 change will come
into picture.

4> You then need to take a trace yourself in Development
system by executing this transaction and check the trace
report for the activities that show up.
[Note: Remember to undo whatever you have saved]

5> Take appropriate approval for role modification as per
process you follow in your organization.

6> Make SU24/ role changes in development system and have
these changes moved till Quality or Fix system for testing
purpose. Create test ID's accordingly.

7> If testing fails, get SU53 report and redo analysis. If
testing is successful create production/ end user roles,
make a TP request and get your changes moved till
production system.

Answer / sasigopal

Hi,
wonderfull explnation thx.

Answer / sandy

first of all check with role owner whether the user has
permission for that t_code. If no role is found with that
t_code create a new role with that t_code and assigned to
that user after permission from role owner.

What is Use Of SM35P and SM35 , Is there any difference between these two ?

1 Answers   Patni,

---

A person has different user ids in different systems and you want to manage their authorizations centrally. Is it possible? How would you do it?

0 Answers  

---

Hi Everyone, can anyone suggest the best institute in Ameerpet, HYD for SAP Security Course. Thnks Ankur

10 Answers  

---

Q1) What is an Authorization Group and when is it used? Explain with example???

1 Answers   HP,

---

what all are the numbers of user types in system measurement?

1 Answers   iGate,

---

---

What are the authorization objects which are always present in user master record?

1 Answers   Wipro,

---

Mention which t-codes are used to see the summary of the authorization object and profile details?

1 Answers  

---

two company codes ex 1001,1002 and two users ,one user need to access both company codes and another user need to access only one company code need to access by giving same role (one role ) to both of them.how can give access or restrict company codes in one role?

2 Answers   IBM,

---

How to do Role Design, Testing and Implementation

0 Answers   IBM,

---

what is the difference between customizing request and workbenchrequest?

3 Answers   Deloitte, Tech Mahindra,

---

Hi we are working on the one company but location are different one location we are restrict the user pass word length 8 characters another location pass word length 10 characters but client is same and also we are maintaining the one app server. Could please help on this

4 Answers  

---

Whay can't you assign a composite role to another composite role ? Need clear explaintion.

3 Answers   Wipro,

---