Authorisation

Question: Dear All SAP gurus

Please tell me how we can five authorisation to a user like basis other that to any profile or to add any profile even tell me can we remove the authorisation from composite profile

Answer:
Maybe John J. is better at translating this than I am this morning. Moved to the Security forum.

Answer:
If you have authorizations you want to limit to a specific set of users you must remove all access from all the roles that have it and then create a special role to give to only those people you want to have the access. All you roles should be single role and not composites as a role is "all the access the user needs to h do their job" Composites cause more problems then they solve and are a sign of poor security design.

There is no "mass change" so you have to find all the roles that have the access you want to remove and do it one by one in PFCG.
Copyright ?2007 - 2008 www.jt77.com