Question:
Is it possible to protect roles from being changed ?
That is some sort of lock wherein the lock needs to be resetted before changing it.
Thanks.
Answer:
Just restrict access to the authorisation objects relating to role maintenance
Answer:
There is a configuration setting also that should be made in PRGN_CUST and it may also be in SSM_CUST to ensure the correct authorizaiton check is made on a change to auth contents as opposed to change in user assignment. As delivered SAP only cheks for change not what, and you have to have change to add users using PFCG which allows you to change anything