Question:
We recently reduced the access our functional support people had in our Production environment due to SOD findings. We are starting to receive feedback and having to add tcodes 1 here and 1 there and things still are not getting to where they need to be. Does Anyone out there know of a SAP Supplied role for "power users" / "Functional Support staff" (excluding ABAP, BASIS, & SAPSecurity admins)
Thanks!
Answer:
Power user concept is to forego training. If it violate SOD's you do not give the access out.
Train your people.
If you want to build a role for these people use ST03 or ST03N and see what they have been running in the last three months and from the tcode list create a new role. then evaluate SOD's remove the offending access or get upper management sign-off to violations of the SOD.