we have one parent role and we derived five roles from that
and i assigned these derived roles to five users now i want
to restrict 2 users for couple of T-codes and rest of the
users work with those T-codes , How we can solve the problem

Answer Posted / sumeithmn

We can change the Authorizations of those 2 specific derived roles by removing the desired tcodes and generate. But this actually defies the derived - template roles concept.

Also, whenever the template role is modified for some reason i future, and if the change is inherited via the template role, then the 2 specific derived roles will lose all the changes made to them (as above) and will get the same auths as the template role again.
The only solution in this case is to not derive all roles from the template role after template roles modification, but to derived individually each of those 3 derived roles, and make the changes exclusively to those 2 derived roles. This is possible but proposes a very weak and unnecessary overhead task for Security administrator.

Is This Answer Correct ?    0 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

what is the main difference between the derived role and a single role?

687


Explain internet-level security?

641


explain the personalization tab within a role?

849


List the various user types.

627


What is the difference between role and a profile?

740






What does the account assessment category specify in a purchasing document in SAP Materials Management?

928


You wan to transport user groups from transaction sugr? Would this impact the groups tab in su01? What would you do?

734


How to run the daily background job s for virsa violations ? thabks in advance

3158


what are the issues you faced with UME?

2449


What are the most used tables in sap?

672


What is Sap security t-codes?

720


Explain transport system-level security?

644


In pfcg where we can add customized t-codes. And where we can see customized t-codes

1231


What are se09 t-codes used for?

699


how to do Reporting and Analysis authorizations

1898