Answer / shanu

In that case you need to create and assign authorization
group to report rsusr003. you can also create tcode for
this report and assign it to user in separate role.In the
new role maintain the object S_PROGRAM with specific auth
group.

No need to remove the SA38 from role.

Just make sure the SA38 role should restricted the access
got object S_PROGRAM. It should not be '*'.

Program Check (Object – S_PROGRAM, Values – Execution and
the authorization group).

Answer / naveen kumar

The question is bit logic, you have to create a new role
with tcode SE38 and in authorization object S_DEVELOP the
activities DEVCLASS '*'
OBTYPE '*'
OBNAME ' RSUSR003'
p_group '*'
activity '03'

Answer / ratnadeepika

Hey guys , One more solution is there .

Go to SE93 ...create a new tcode for eg : ZSA38 .

with the option Transaction with parameters option ...

In the main screen Tcode field give SA38 as tcode ...and u
will find 'DEFAULT VALUES" ...Add the entry
Name of the screen field : RS38M-PROGRAMM
Value : RSUSr003 save . If u want u can add some more
values .

Give this Tcode access to the user u want to restrict .

Try it and let me know if u are facing any problems . Mail
me for screenshots .

Answer / subal

Hi,

In that case you need to create a new role for such users.
Remove the SA38 role.
Create a new role with the required reports and assign the
role to the user.

Thus user will loose access to SA38 and get direct access
to required reports eg rsusr003.

Regards,
Subal

Answer / vamshi

screens shot for this as well pls ;

Q1) What is the difference between Derived Role & Copy Role? Can't we just do a copy instead of deriving it when both have the same characterstics or inputs or functions??

2 Answers   HP, Tech Mahindra,

How we Schedul and administering Background jobs.

2 Answers   IBM,

What is the Functionality difference between ECC 5 and ECC6? i.e. new functionality in ECC6 which is not in ECC 5.

0 Answers  

What is the maximum number of profiles in a role and maximum number of object in a role?

0 Answers  

In Agr_1251 we are able to see 100 roles but in SUIM we are able to see 120 roles what's the reason behind this ? why is the difference between the SUIM and the AGR table ?

0 Answers  

What every changes done exist role in development system that changes are not reflected in quality system, but transport is successfully moved?

0 Answers  

Difference between Change Mode and Expert Mode in PFCG?

2 Answers   IBM, L&T,

What's the basic difference in between SU22 & SU24?

3 Answers  

How many authorizations fit into a profile?

1 Answers  

How many profiles we can add to role and if already user has 312 profiles the, how will you provide more profile to user?

2 Answers   Cap Gemini,

Can you please let me know the GRC 10 landscape, is it 2 system landscape like GRC 5.3 or 3 system landscape. As GRC 10 is ABAP Stack

4 Answers   TCS,

how to do Assigning authorization groups for table restrictions and program restrictions.

1 Answers   IBM,