This website is not affiliated with, sponsored by, or approved by SAP AG.

Role copied from SAP_ALL without all transactions

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Role copied from SAP_ALL without all transactions

Postby Puneetroa » Thu Nov 01, 2012 5:25 am

Hello SAP Experts,
I have to create a new role which is to be copied from SAP_ALL profile but should exclude a few transactions.

Now either I can take all the transactions from the system and manually add them, which is a tiresome job or is their any other way around?

Kindly suggest. Thanks
Puneetroa
 
Posts: 1
Joined: Thu Nov 01, 2012 5:22 am

Re: Role copied from SAP_ALL without all transactions

Postby jurjen » Thu Nov 01, 2012 3:07 pm

Please tell us a bit more about the security issue you are facing and/or the requirements you got. Just taking some transactions out of an SAP_ALL copy doesn't sound like a solution to me.
jurjen
 
Posts: 298
Joined: Wed May 17, 2006 8:17 am
Location: The Netherlands

Re: Role copied from SAP_ALL without all transactions

Postby Al. » Fri Nov 02, 2012 3:15 am

As I replied on the IT Toolbox question....You won't want to hear this but if you are taking that approach you might as well leave in the transactions as removing them (which is often done by creating ranges in S_TCODE) will not stop people from being able to access
the functionality.

As Jurjen says, what is the issue or requirement that you are trying to address. If someone is asking for all transactions then ask them to sit down with you and write a list of what they need to perform the task.
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3049
Joined: Tue Feb 25, 2003 5:35 am
Location: London


Return to SAP Security

Who is online

Users browsing this forum: Yahoo [Bot] and 3 guests





This website is not affiliated with, sponsored by, or approved by SAP AG.