Restrict SPRO from SAP_ALL and SAP_NEW

Question: Dear All,

I want to restrict SPRO here.

How can i restrict this?What all the steps involved in doin this?

Pls help me..

Regards,
Anil Shenoy

Answer:
Sorry for not being at any help at all, but good luck

IMG consists of SPRO (of course) and then a myriad of other transactions, so it is not that easy to to just give out a complete solution for restriction.

Besides that, if your starting point is sap_all, then restricting IMG is not enough, since you also have to deal with direct table access.

You will have more grief than success by trying to restrict sap_all in this way.

Answer:
Hi,
u can restrict spro authorizations by not assigning sap_new porifle and restricting sap_all

Answer:
Hi Dheeraj,

Can you tell me how?

Need your help in this..

Regards,
Anil Shenoy.

Answer:
best way to do this is my coying the SAp_all and SAP_new profiles into new z profiles and exculde SPRO

Answer:
best way to do this is my coying the SAp_all and SAP_new profiles into new z profiles and exculde SPRO

...& all the other transx's assigned to IMG, & all the S_TABU_DIS change access to the tables.

You should lock down change to IMG in quality & prod systems using transx SCC4. In your development system you can grant access via an IMG project & then control the transports to quality & prod to make sure changes are relevant & have been tested.

Answer:
Hi,
u can restrict spro authorizations by not assigning sap_new porifle and restricting sap_all

But remember that IMG consists of several thousands transactions besides SPRO.
Copyright ?2007 - 2008 www.jt77.com