This is in continuataion to the previous question.
a user is assigned with tcode SA38.how to restrict him to
execute only a few reports,say rsusr003.If you're going to
modify the role(having sa38) assigned to the user,that will
affect other users also because that role might be assigned
to multiple users.I don' want that to happen.so what is the
solution?
Answer Posted / shanu
In that case you need to create and assign authorization
group to report rsusr003. you can also create tcode for
this report and assign it to user in separate role.In the
new role maintain the object S_PROGRAM with specific auth
group.
No need to remove the SA38 from role.
Just make sure the SA38 role should restricted the access
got object S_PROGRAM. It should not be '*'.
Program Check (Object – S_PROGRAM, Values – Execution and
the authorization group).
| Is This Answer Correct ? | 5 Yes | 0 No |
Post New Answer View All Answers
what is your ticketing tool? can we give some details about how we are getting tickets
what is analysis authorization in sap bi and how to create analysis authorization in sap bi?
what are the pre-requisites that should be taken before assigning sap_all to a user even there is an approval from authorization controllers?
Can you anybody tell me what are the questions frequently asked 3 years of SAP Security experienced level in INFOSYS company.
What is the use of tmssup* rfc destinations?
Is it possible to change role template? How?
Can you explain network topology in sap systems?
what are all the questions covered in "profiles related concepts " please let me know ?
How would you do the 'a user logge into production system, changes a table and logged out'. How would you track him?
What is the Functionality difference between ECC 5 and ECC6? i.e. new functionality in ECC6 which is not in ECC 5.
What is the use of Personalization tab in SU01?
What is stad?
the company needs to expand its region to another country which the same authorizations had previously what approach you will take
Explain protecting public keys?
When would you update a sap table directly? What precautions would you taje?