Page 1 of 1

Segregating PFCG role

PostPosted: Mon Jun 30, 2014 7:39 am
by TONI
Hi guys....Am back!!!
Quick one....how do I segregate the PFCG role such that one guy can create the role only and the other guy can assign the users only?? :D Am back after a long hiatus so pls assist.

Re: Segregating PFCG role

PostPosted: Thu Sep 10, 2015 3:53 am
by Trygve
Up until resently I'd say that it's object S_USER_AGR.

Assign Activity 22 to the one assigning and Activity 01 & 02 to the one creating/changing.

BUT lately I've had a siuation in two of my systems where it requires change access to assign roles. I believe it must be an error by SAP. Haven't had the time to dig in, but quick search didn't immedeatly give me any notes to solve it.

Re: Segregating PFCG role

PostPosted: Thu Sep 10, 2015 7:35 am
by jurjen
Whether you need ACTVT 02 or 22 is decided by a configuration switch in PRGN_CUST, called ASSIGN_ROLE_AUTH. See note 312682