we have one parent role and we derived five roles from that
and i assigned these derived roles to five users now i want
to restrict 2 users for couple of T-codes and rest of the
users work with those T-codes , How we can solve the problem
Answer Posted / sumeithmn
We can change the Authorizations of those 2 specific derived roles by removing the desired tcodes and generate. But this actually defies the derived - template roles concept.
Also, whenever the template role is modified for some reason i future, and if the change is inherited via the template role, then the 2 specific derived roles will lose all the changes made to them (as above) and will get the same auths as the template role again.
The only solution in this case is to not derive all roles from the template role after template roles modification, but to derived individually each of those 3 derived roles, and make the changes exclusively to those 2 derived roles. This is possible but proposes a very weak and unnecessary overhead task for Security administrator.
Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers
what is the main difference between the derived role and a single role?
Explain internet-level security?
explain the personalization tab within a role?
List the various user types.
What is the difference between role and a profile?
What does the account assessment category specify in a purchasing document in SAP Materials Management?
You wan to transport user groups from transaction sugr? Would this impact the groups tab in su01? What would you do?
How to run the daily background job s for virsa violations ? thabks in advance
what are the issues you faced with UME?
What are the most used tables in sap?
What is Sap security t-codes?
Explain transport system-level security?
In pfcg where we can add customized t-codes. And where we can see customized t-codes
What are se09 t-codes used for?
how to do Reporting and Analysis authorizations