Changing Role created with Customizing Auth. Utility

Question

I created a role in PFCG using the Customizing Auth. option under Utilities by referencing a project view that I created in the IMG.  My intent was to create a security role with access to all of the SPRO tcodes and related security objects.  I then modified that role so that it only granted display access to these transactions.
Later, I discovered that this role also granted access to SE38, SE37, SA38 and other critical transactions.  I know this will raise concerns with my auditors so I attempted to delete these transactions from my role.  I was unable to do this because my role was created with the Customizing Auth. option.
Does anyone know of a way that I can remove these tcodes from the S_TCODE object?
Thanks,
Dennis Beausoleil   
<telephone_number_removed_by_moderator>
Edited by: Julius Bussche on Feb 23, 2010 12:04 PM
Please use your business card options for such details.

Answer 1

>
Dennis Beausoleil wrote:
> I created a role in PFCG using the Customizing Auth. option under Utilities by referencing a project view that I created in the IMG.  My intent was to create a security role with access to all of the SPRO tcodes and related security objects.  I then modified that role so that it only granted display access to these transactions.
>
> Later, I discovered that this role also granted access to SE38, SE37, SA38 and other critical transactions.  I know this will raise concerns with my auditors so I attempted to delete these transactions from my role.  I was unable to do this because my role was created with the Customizing Auth. option.
>
> Does anyone know of a way that I can remove these tcodes from the S_TCODE object?
>
> Thanks,
>
> Dennis Beausoleil   
> <telephone_number_removed_by_moderator>
>
> Edited by: Julius Bussche on Feb 23, 2010 12:04 PM
> Please use your business card options for such details.
Dennis,
In PFCG authorization change, inactivate the S_TCODE auth object then manually add S_TCODE and enter/paste the desired transactions with the exception of SE38, SE37, SA38 and other critical transactions.
Good Luck!