SAP Library - Find your answers

How good you do your security there may come a time when user might need emergency authorizations. Such authorization can be necessary in exceptional situations. It could be a month end close, which got closed before the month end.
Virsa provides tool called firefighter, which can help you. First you have to define what is an emergency for your company. You might have to create roles for these emergencies, and also define the time frame this role will be assigned to users. You might have to define an approval procedure for this. Hoe is this going to be audited. Work with your audit team to make sure they are ok

Once I had couple of roles which where made just t hold reports. The number of reports where huge. Here is how I did it.
First create a CATT script with a dummy role and add one tcode. Make the role and T-code as variant. Once you have this you can add any number of tcode to any existing role. Icould resuse this tocreate another roles where I had to insert lot of T-codes.

Goto SUIM----> transactions----> executable for role.


and enter the role name and press F8 to get the results.

but this gives only tcode in the menu of the role.
It will not show the tcodes that are added manually to the role in S_TCODE object.
To find all tcode executable for role along with the tcode that are present in the tcd field..
goto se16 enter agr_1251 and click on data browser button
enter the role name in agr_name field and enter tcd in FIELD field ash shown in figure.



Then click on execute button or press F8 to execute and you will see the list of tcodes executable for that role as below

1.Go to PFCG and "Utilities" --> "Mass Download"
2.Select the Roles, it will ask the path where to download/save that role on local desktop give the location and save it.
3.The Roles will save as a single file on the desktop.
4. Go to the Target System and Go to PFCG and "Role" --> "Upload"

Role and profile go hand in hand. Profile is bought in by a role. Role is used as a template, where you can add T-codes, reports, URL's.

Profile is one which gives the user authorization. When you create a role, a profile is automatically created.

Keyword: SAP HR
Title : Structural Authorization vs Role Authorization

Keyword: SAP HR
Title : Structural Authorization vs Role Authorization