we have one parent role and we derived five roles from that
and i assigned these derived roles to five users now i want
to restrict 2 users for couple of T-codes and rest of the
users work with those T-codes , How we can solve the problem

Answer Posted / annavarapu

first we need to add those t-codes for the users who required
access to execute and then remove the codes from the roles.
Automatically the users who doesn't required the t-code access
will workout

Is This Answer Correct ?    0 Yes 7 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

You want to configure the local and global setting of cua. Where would you do that? What would happen if you have inconsistent settings?

603


What are the steps involved in SAP Security upgradation projects and also in SAP security impletation projects

2364


what is your ticketing tool? can we give some details about how we are getting tickets

1159


How to update risk id in rule set?

670


Explain transport system-level security?

646






How do I change the name of master / parent role keeping the name of derived/child role same? I would like to keep the name of derived /child role same and also the profile associated with the child roles.

900


Differentiate between saml token profile and a sap logon ticket

853


What are su22 t-codes used for?

693


Differentiate between usobx_c and usobt_c

628


By which parameter number of entries are controlled in the user buffer?

910


how to do Reporting and Analysis authorizations

1901


What are se10 t-codes used for?

702


What is the difference between usobx_c and usobt_c?

646


What are the upgrades happened in GRC 5.3 from GRC 5.2?

3725


Explain network topology in sap systems?

607