Question:
HI
I want to give some consultants only display authrisations in SPRO transaction so that they can view the configuration done in the system.
Can anyone tell me how to do that??
Regards
Basisadm
Answer:
1. Create a project in SPRO fro the entire IMG
2. create a role in PFCG and enter
3. use pull-down utilities->customizing
4. open the auths and change all to activitie to display ( more than field ACTVT) and genereate
Dependin on your system the above process may time out or abort, options: create smaller projects in single roles and then use "insert menu from role" into the master IMG ( SPRO role)
OR search the site for a quick program to do step 1 and 3 and continue with 4.
Answer:
the problem is that all the main consultants have already made configuration i just want he new ones to be able to see that so now i canot make new projet and do .you have to suggest in this only
Answer:
the problem is that all the main consultants have already made configuration i just want he new ones to be able to see that so now i canot make new projet and do .you have to suggest in this only
Answer:
1. Create a project in SPRO fro the entire IMG
2. create a role in PFCG and enter
3. use pull-down utilities->customizing
4. open the auths and change all to activitie to display ( more than field ACTVT) and genereate
Dependin on your system the above process may time out or abort, options: create smaller projects in single roles and then use "insert menu from role" into the master IMG ( SPRO role)
OR search the site for a quick program to do step 1 and 3 and continue with 4.
we cant create a role and then put spro as the transaction and change all activities to display?
i tried to do the above and go to spro, under sap reference img but failed with the transactions found in there
_________________
The heart has its reasons which reason knows not of
PASCAL
Answer:
Most of the tcodes with Swich to display. you will have to add the display tcode and not the change tcode. to the role . SPRO is written as a change and the display alternative is not on the SPRO menu. The user may have to rely on the Role menu instead of the Reference IMG.
Answer:
Most of the tcodes with Swich to display. you will have to add the display tcode and not the change tcode. to the role . SPRO is written as a change and the display alternative is not on the SPRO menu. The user may have to rely on the Role menu instead of the Reference IMG.
What do you mean the display tcode and not the change tcode? They are almost always the same for IMG transactions. In fact in many cases (even in the IMG) the only tcode is SM30 and it is called from SPRO.
If you only want display authority you have to fiund the resulting authoriizations (S_TABU_DIS in most cases) and makes sure that the activity is set to display. If you have a lot of "loose authority" for S_TABU_DIS then a display strategy like this isn't very effective.
_________________
bwSecurity
Answer:
A good many tcodes are SM30 ( parameterized) but there a many more that are not and require more than S_TABU_DIS, Those that do require S_TABU_DIS only will "revert to Display " . When you load all the tcodes (tables cus_acth and cus_actt ) into a role MANY more auth objects come into the role besides S_TABU_DIS. MAny are stndard tcodes found in the S000 menu and are CHANGE not DISPLAY. SCCL, SCL1, and 'K' tcodes , PFCG SU01 and more all all in the IMG.
Answer:
Most of the tcodes with Swich to display. you will have to add the display tcode and not the change tcode. to the role . SPRO is written as a change and the display alternative is not on the SPRO menu. The user may have to rely on the Role menu instead of the Reference IMG.
are u guidign me to add all the tcodes in the spro to my display_spro role?
_________________
The heart has its reasons which reason knows not of
PASCAL
Answer:
The other IMG tabl eis CUS_ACTOBJ and even the MInibasis I am looking at has tcodes like CMOD ( not controlled with S_TABU_DIS ) , BD61 ( not controlled with S_TABU_DIS ), BD87 ( not controlled with S_TABU_DIS ), SU02 ( not controlled with S_TABU_DIS ), FI08 ( not controlled with S_TABU_DIS ) the list goes on....
Answer:
are u guidign me to add all the tcodes in the spro to my display_spro role?
Yes, with two caviats,
1. Give Display ONLY access in the objects
2. Instruct the user to use the Pull-down menu in the called tcode and look for the "display" option on the Change/create tcode.
Most configurers, do not know the tcodes only the path in the IMG, and the IMG only knows the Change/create tcode ( aside form SM30). So NOT giving them the tcodes will end in a lot of dead-ends.
In a perfect world you would also add the DISPLAY tcodes ( but you probably do not know them) so any SM97 settings forcing a S_TCODE check on the called tcode would not stop the user either.
Answer:
okay... but besides doing a indivdual click in each of the nodes in SPRO, is there any way which i can know all the transactions in SPRO?
thanks
_________________
The heart has its reasons which reason knows not of
PASCAL
Answer:
okay... but besides doing a indivdual click in each of the nodes in SPRO, is there any way which i can know all the transactions in SPRO?
thanks
SPRO is an interesting "report tree" in many ways. The tree contains the table or view name and when the user clicks on the clock icon it effectivley reads the node name and then executes transaction SM30. There is very frequently no specific transaction associated with the table. Sometimes it does a call transaction to one of the parameterized O* transactions that are ubiquitous for configuration but frequently not at all.
Consequently knowing all the transactions doesn't mean you can execute all the nodes of SPRO.
Dr. Jarboe showed us in an earlier post how you could find the O* transactions but sadly it won't get you all you want.
_________________
bwSecurity
Answer:
Tables CUS_ACTOBJ and Tables CUS_ACTH has many ( maby not all) of the tcodes on that the node in SPRO call manu ar SM30 paramerterized many are not. Nany are O* many are not.
Answer:
Hi
I have given display in all objects in SPRO but in s_tcode when i put X* then that doesnot give me display in all the activities in fact the junior consultants can create and change also which is not acceptable to my PM so please let me know what exactly to do??its urgent