we have one parent role and we derived five roles from that
and i assigned these derived roles to five users now i want
to restrict 2 users for couple of T-codes and rest of the
users work with those T-codes , How we can solve the problem

Answer Posted / zaky

The answer is simple, We cannot remove the tcodes from child
roles, so we have to restrict at org level for that tcode,
The user might need tht access to different company code or
plant, So at org level maintain a wildcard value which wont
allow user to fully access the tcode

Is This Answer Correct ?    0 Yes 5 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

Can you explain snc in sap security?

646


what is the critical issue u are faced in your previous experience

1423


How can sap security be improved?

686


how we Restrict the auth groups for table maintain, creating Auth group using SE54 to built new Auth groups to restrict tables via auth object S_TABU_DIS

1702


What is stad?

735






what is the process to find that one consultant had removed a table from sap tables

2041


Explain x-glueb and its use in sap security.

804


Can you explain protecting public keys?

597


what is hypercare and go live support?

4731


How to add custon t-code to a role and how to find the auth obj of custom t-code.if the custom t-code doesnt have auth obj, will you save and generate the role?

699


How we Provided SAP Security design, configuration, and support for SAP Net Weaver systems running BI/BW 7.0 (Net Weaver 2004s)

1791


Differentiate between usobx_c and usobt_c

626


How to assign any program to user?

1059


What is the difference between c (check) and u (unmaintained)?

1094


Which t-code can be used to delete old security audit logs?

896