Question:
I am currently faced with building project team roles as we implement ECC 6.0. The roles will be used by the Configuration teams as they work define the solution for our client. The configuration teams consist of Consultants and SMEs from the client. We have been using roles that are pretty heavy (all types of access). This approach has proven to be troublesome b/c these roles are causing system performance issues. We believe it to be due to huge amount of access provided in these roles requires enormous amount of resources to load the user buffer and/or the user menu.
My normal approach would be to use SAPs RBE tool to get a baseline of roles to use as a starting point. With the current structure of SAP -unicode- the RBE tool is no longer compatible. I am now left with querying the individual teams to obtain their required level of access. This is painful for many reasons (but may be my only option at this point).
With all the being said, is there a way to obtain user history with in a 6.0 system? I am familiar with ST03N but retrieving the data from that transaction is painful as well. I guess I am looking for a short cut method similar to what was available using the RBE tool.
Any suggestions/comments are greatly appreciated.
Lastly, is there any update on the release of the RBE tool for ECC 5.0/6.0 (the latest netweaver stack)?
Thanks!!
Answer:
We have been using roles that are pretty heavy (all types of access). This is as it should be, If you limit the access too much the system will be configured incorrectly as the consultants will find the wrong way to configure the system inorder to get it to work.
This approach has proven to be troublesome b/c these roles are causing system performance issues Impossible, THe roles can do nothing.. It is a training issue and a project standard issue. Theproper use of the Dev system must be the foundation of your installation. This is not a security problem. It falls under, system resources ( size of the Dev box, memory,"horsepower") and training.
roles requires enormous amount of resources to load the user buffer and/or the user menu. Your role can be made simple by copying SAP_ALL and removing all the Basis auth objects (mostly starting with S). you will have to give generic ones for printing RFC etc. But hthis way the user only gets one role with one authorization per object and no duplicates that are inherent with multiple roles on a user.
My normal approach would be to use SAPs RBE tool to get a baseline of roles to use as a starting point. With the current structure of SAP -unicode- the RBE tool is no longer compatible. I am now left with querying the individual teams to obtain their required level of access. This is painful for many reasons (but may be my only option at this point). Again do not be over limit as it will end up with a poorly configured system.
With all the being said, is there a way to obtain user history with in a 6.0 system? I am familiar with ST03N but retrieving the data from that transaction is painful as well. I guess I am looking for a short cut method similar to what was available using the RBE tool.
Any suggestions/comments are greatly appreciated. If ST03N is still available in this version so is the source data and the code to retreive this info in a format you can user. Should not be more than a 20 to 30 line abap.
_________________
John A. Jarboe