Question:
Greetings all,
According to company's security policy we are currently reviewing authorizations of all users, therefore it was agreed that all internal SAP consultants will have "display all" role in productictive client. We have already removed access to "create" and "change" Tcodes in Logistics, Accounting and HR modules except Information System. The question is as follow:
Does IS module have any Tcodes that allow creation or changing of master data or general ledger entries or it is 100% reporting module??? Can I give full acess to IS for "display all" role?
_________________
Best regards,
Ren
Answer:
There is always a possibility of having change and create, delete, etc in any code in SAP. Just because it says report does not mean it does not do anything. the key is to create a role where EVERY activity (not just ACTVT) is display.