Re: [sap-security] How to copy and restrict some t-code rights of SAP_all profile
Posted by
Admin at
|
Share this post:
|
|
0 Comments
 | Posted by Alex Ayers (Director of Operations) on Apr 3 at 5:26 PM |  Mark as helpful |
Hi,
Why do you want to copy SAP_ALL? By it very definition you will not
restrict what you think you are restricting and it is a very poor way of
giving access to people.
Lets say that you restrict access to client admin. You still give that user
the ability to update their own access, circumvent the authorisation
controls and do other things like trash the environment that your SAP box
runs on.
On 1 April 2010 11:13, reji-mathew via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by reji-mathew(IT Manager)
> on Apr 1 at 6:14 AM
> Hi, how to copy sap_all profile to "Z" profile and restrict some t-codes
> rights from the new profile like SCC3 etc.
>
> Thanks & Regards
>
> Reji Mathew
__.____._ Why do you want to copy SAP_ALL? By it very definition you will not
restrict what you think you are restricting and it is a very poor way of
giving access to people.
Lets say that you restrict access to client admin. You still give that user
the ability to update their own access, circumvent the authorisation
controls and do other things like trash the environment that your SAP box
runs on.
On 1 April 2010 11:13, reji-mathew via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by reji-mathew(IT Manager)
> on Apr 1 at 6:14 AM
> Hi, how to copy sap_all profile to "Z" profile and restrict some t-codes
> rights from the new profile like SCC3 etc.
>
> Thanks & Regards
>
> Reji Mathew
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Alex AyersSAP Security Helper
Posted helpful replies on 5 threads in a group to earn a Bronze Achievement
Related Content
In the Spotlight
White Papers
In the Spotlight
Earn Recognition for Your Contributions at Toolbox for IT. Gain Points for Community Achievements
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
_.____.__ 
