Question:
Hi,
Currently I'm working with user roles and I need help:
1. When a T-Code is 'stuck' and the authorization check shows no authorization error, what should I do?
2. How do I manage the objects so that they automatically added to user profiles when I add a T-Code?
3. When I put together more than 1 role into a single role (not composite), how come the objects in the new role returns to default value?
Is there a way to keep the existing (old) values?
4. When a field has '*' (star) value filled, how do I put 'substraction'. For example: TCD for S_TCODE * (minus) VA01. Is it possible?
5. What are the methods for documenting user authorization profiles?
6. How come 'Display Changes' for roles don't show (in detail) all the changes I made?
7. How come some field like BERGRU don't exist in one server (blank selection) and shows all in another? How do I know which table don't present in either server?
Thanks a lot.
P.S.
Snowy: Sorry for that wrong forum. Don't get bored. I'm still learning.
Answer:
i can answer one question , how to subtract a particular value.
Go for ranges for example: you start the transacions range with A* to VA00* then start with VA02* and go on. In this manner you can exclude VA01.
One more stuff u got to keep in is , while goin for range you should consider the ASCII characters.
You can get the ascii characters from the net.
Answer:
1. Do a trace through ST01
2. Maintain values in SU25
3. Not understood...
4. Answered already
5. Spreadsheet, worddocuments - take your pick. Don't think there are any good tools to do this outside of SAP. What do you need this documentation for?
6. What version of SAP are you on?
7. Don't know. Sounds like something to talk to the basis guys about...
Hope that helps a bit
Answer:
2. How do I manage the objects so that they automatically added to user profiles when I add a T-Code?
Transx SU24
Check Indicator CM is Check & maintain in PFCG.
You can also specify default values to be suggested when the object comes through.
Do a search on this forum, there are loads of posts on this subject.
Answer:
Sorry.
su24 - not su25!
Answer:
As far as i know mostly when you are using standard SAP tcodes you will get the no authorization error.
If u are using customized tcodes(zcodes) u have possibilities to come across the situation u mentioned in your first question. For that the best thing i know is send back the tcode(zcode) to the one who built it. Zcode may not be serving the purpose.
Sit back and relax .
If u r bored then , set a Trace and findout what is it trying to do in the system.
Answer:
i completely miss understood your first question sorry for the irrelevant info given to you in my previous reply.
Here we go
if u get no authorization error , simply execute SU53 and and find out what authorization is it checking for and apply it .
If u dont have authorizations for SU53 then ask the one who sets your id to give more authorizations or if u r empowered then go head and assign for yourself.
Answer:
Thanks for the post guys!
HENDRIK:
1. That works, only sometimes I have trouble when I have to run the T-Codes myself because some users just don't cooperate...
2. Well, I'm only doing authorizations, not allowed to SU24. Don't know why.
3. Say, role A has 100 objects each with their own activities and fields set up for user A. When I duplicate the role for user B, all the ACTVT and fields in role B return to default values. While role A has ACTVT 03, role B has all 01,02, and 03 (object's default). How come?
4. -
5. I use the documentation to show my superiors what I've been doing to the roles. Since it's hard to remember how one object relates to another and there are a lot of T-Codes assigned in some roles. Sometimes our auditor examine and perform tests based on the documentation to make sure the access given to user is really limited on their tasks.
6. 620
7. Some tables are not available due to limited server size. Yeey.
YAYAYA:
-When SU53 showed all auth.checks sucessfull. ST01 does the job. Thanks.
-The errors often occurs on S_ALR T-Codes, sometimes the T-Codes just run smoothly (no errors), only the results/reports shown are not accurate.
KET
Somehow my suggestions just don't get through. Since they're only based on my tests..
Thanks experts!