This website is not affiliated with, sponsored by, or approved by SAP AG.

Segregating PFCG role

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Segregating PFCG role

Postby TONI » Mon Jun 30, 2014 7:39 am

Hi guys....Am back!!!
Quick one....how do I segregate the PFCG role such that one guy can create the role only and the other guy can assign the users only?? :D Am back after a long hiatus so pls assist.
TONI
 
Posts: 193
Joined: Fri Jul 18, 2003 12:37 pm

Re: Segregating PFCG role

Postby Trygve » Thu Sep 10, 2015 3:53 am

Up until resently I'd say that it's object S_USER_AGR.

Assign Activity 22 to the one assigning and Activity 01 & 02 to the one creating/changing.

BUT lately I've had a siuation in two of my systems where it requires change access to assign roles. I believe it must be an error by SAP. Haven't had the time to dig in, but quick search didn't immedeatly give me any notes to solve it.
Regards
Trygve
Trygve
 
Posts: 966
Joined: Mon Oct 21, 2002 1:53 am
Location: Norway

Re: Segregating PFCG role

Postby jurjen » Thu Sep 10, 2015 7:35 am

Whether you need ACTVT 02 or 22 is decided by a configuration switch in PRGN_CUST, called ASSIGN_ROLE_AUTH. See note 312682
jurjen
 
Posts: 298
Joined: Wed May 17, 2006 8:17 am
Location: The Netherlands


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 3 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.