Removal of t-code authorization

Hi,
How to remove authorization for a single t-code from the list of about 500 users.
They have been authorized to this t-code via different roles.
Thanks in advance,
RAMA

Auke Visser wrote:>
> It is simpel but a lot of work remove the t-code from every role!
I assume that "simpel" has a completely different meaning to the generally accepted meaning of the English word "simple"?
I dont think it is possible to answer this question in a usefull manner without knowing the transaction code(s)...
In many cases, removing the transaction code from object S_TCODE (only) is useless (except for stupid end users).
Relying on the fact that all end users are stupid, can quickly become an occupational hazard for many transactions...
Depending on the transaction, my recommentation would be to look whether there is an object check upfront in the transaction's underlying coding or a common denominator object which is checked, regardless of how the user accesses the "transaction"... and then restrict those authorization object(s) or remove them entirely if you are sure that the access is not required for what ever reason.
Some transaction groups have a "base check" function from which you can form an opinion.
Kind regards,
Julius

Similar Messages

  • Authorization removed but T-code still accesible

    Hello,
    We are on ECC 6.0 / Oracle 10 / Solaris 10...
    I am removing a T-code from a Z role in the system , it is still reflecting to the user...
    I am removing it from the menu completely , but i can see it in object S_TCODE...
    Is this is a bug or i am missing something?
    Thanks,
    R@HuL...

    Hi Rahul,
    Please check the status of the object S_TCODE in the role being mentioned by you.If you have the status of the object as STANDARD then the values have been pulled from the entries in the role menu and if the status is MANUALLY then the values have been entered manually and not through the role menu.
    After removing the concerned transaction from the role menu and generating the profile,please check where the transaction is appearing in the role authorization,it should not appear in the S_TCODE object if it is in STANDARD status.But if the object S_TCODE is in status MANUALLY the transaction might appear there.
    Bidisha

  • Removal of t-code

    Hi All,
    We want to remove a t-code from a display role where the
    menu is not maintained.
    The S_TCODE is given as *. (Full authorization)
    how to go about the same. If we remove that from S_TCODE
    we need add all other entries which is very difficult.
    Please advise.
    Thanks,
    DVRK

    > I think the best option is to create ranges with wildcards excluding the transaction you need to exclude.
    Oh dear, I personally think this is about the worst option
    Like Julius said, better rebuild the role, after redesigning it of course. And put all required transactions in it via the menu.
    One very important thing about SAP security is that it is about allowing stuff, not about denying. So giving a user all rights and taking away a few is not the road to follow. A role with * in S_TCODE should never be called a display role as it is bound to have several security loopholes in it and the same goes for a role with tcode ranges. You'll be amazed how many programs can be started through more than one transaction.
    Another example of risks involved: Everytime a new transaction is introduced into your system, either by your own developers or by SAP, it is automatically executable via your display role, whether it is a display transaction or not.....
    Better have the users specify what they want to display and which transactions they need to do that and don't take "all" for an answer.
    Jurjen
    P.s.,
    Carlos, asking for rewards is against forum rules.
    Edited by: Jurjen Heeck on Oct 23, 2008 8:39 AM

  • How can I remove the Apple ID authorization only on one computer and authorize another in his place?

    how can I remove the Apple ID authorization only on one computer and authorize another in his place?

    De-authorize the computer in question.
    Then authorize the new computer.
    Or de-authorize all computers and authorize only the ones that actually exist.

  • PA  T codes Authorization

    Hi All,
    Could you please tell me what are the following T codes authorizations should be given to the end users to work in Production client.
    PA10 - Personnel file
    PA20 - Display HR Master Data
    PA30 - Maintain HR Master Data
    PA40 - Personnel Events
    PA41 - Change Hiring Data
    PA42 - Fast Data Entry for Events
    PRMD - Maintain HR Master Data
    PRMF - Travel Expenses : Feature TRVFD
    PRML - Set Country Grouping via Popup
    PRMM - Personnel Events
    PRMO - Travel Expenses : Feature TRVCO
    PRMP - Travel Expenses : Feature TRVPA
    PRMS - Display HR Master Data
    PRMT - Update Match code
    PS03 - Info type Overview
    PS04 - Individual Maintenance of Info types
    Please let me know asap this is very urgent......
    Regards,
    Sitarama

    Hi,
    Actually it depends on the users and department.For eg,end user having payroll area -AA (an eg) should get have authorisations to only  employees that come under that payroll area. and also there will be some user whom should run payroll.So all other users wont be having authorisation for payroll.You can give authorization for transaction which are required for the end user if client feels his/her works involves or need this transaction.Actually these details has to provide by the client manager. 
    Transactions that end-user use ?
    Regards,
    Manoj.

  • One report, One Source System with multiple Company Codes -- Authorization

    Hello Guys
    We have 2 DEV source systems for our BI implementation right now. one for US (CCode - 406) an one UK(CCode - 301).
    We have already completed the implementation for UK with 38 reports.
    we are right now moving the US implementation.
    when we move to QAS we are going to have one Source system with both US and UK data.
    so when we move to QAS, the US clients wants to view the reports developed in UK implementation with their own data.
    How can we do that. since some reports doesn't have company code to restrict the data to respective users.
    Thanks and Kind regards,
    shekar.

    Hi
    First make the company code authorization relevant in infoobject BEx explore tab
    If your in BI7 , you have analysis authorization concept
    http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm
    Regards
    N Ganesh

  • How to remove the autogenerated code in F M- 'MAT_MOVE_BMMH1_MARA'

    Hi,
    I added the custom fields in MARA to upload the LSMW.So i added the enhancement in LSMW program RMDATIND.It is working fine now.Then,i need to remove the code from that.where i could removed only the enhancement.(Note: when the enhancement is added in RMDATIND program which writes the code for structures automatically).
    But it is not removing the code from the functional module "MAT_MOVE_BMMH1_MARA'(RMDATIND) because which is autogenerated the code in the FM from the program "RMDATIND".And also its asking the ACCESS KEY since it is a standard program.
    So i need to remove the autogenerate code in FM - MAT_MOVE_BMMH1_MARA.
    Thanks for your kind reply..

    Hi there,
    The function module "MAT_MOVE_BMMH1_MARA" has status 'Not released'.
    The release status is visible in the Attributes tab in SE37.
    According to the note
    415983 Modification/customer developments of SAP function
    109533 Use of SAP function modules
    Attributes. Some of the reasons why internally released Function
    modules are not documented are as follows;
    - too much overhead
    - internally released function modules are often changed and updated
    - are designed for specific purposes by the relevant Application
    Developers etc.
    SAP does not support problems that occur if the customer used non-released function modules.
    Many thanks,
    Mohammed Hussain.

  • HT4623 how do i remove the security code on the screen

    how do i remove the security code on the screen   just installed 7 and did not have that before

    After installing your iOS on your device you will be asked to "Create a Passcode" you should have the option to skip this, or if you've set one up you can turn it off by going to: Settings>General>Passcode Lock
    Regards,
    Steve

  • HT201209 My child received a $50 voucher for Xmas but doesn't want to use it all at once. I'd like to remove the voucher code so I can purchase items from iTunes using my usual account. Is this possible?

    My child received a $50 voucher for Xmas but doesn't want to use it all at once. I'd like to remove the voucher code so I can purchase items from iTunes using my usual account. Is this possible?

    Hi czigrand,
    Thanks for visiting Apple Support Communities.
    Currently, you can gift dollar amounts or individual items (EG. songs) on the iTunes Store. See this article for more information:
    In the iTunes Store, you can gift a dollar amount or specific music, movies, TV shows, or apps from your iPhone, iPod touch, iPad, Mac, or PC. Follow these steps to send a gift from the iTunes Store.
    iTunes: Sending iTunes Gifts
    http://support.apple.com/kb/HT2736
    Best Regards,
    Jeremy

  • Removal of T.Code from role

    Hi all,
    i have to remove a t.code FBRA from all the plants users, there are 40 single roles, with T.Code FBRA,  how can i remove it at a time, without deleting individually in each roles. Is there any method , plz let me know.
    Thanks & Regards
    Syed..

    Hi Syed,
                 Are you using a role which is created by using the standard role.
                 Copy the role to a new role then delete the transaction from the role
                 and assign the user with the newly created role. I think this would be one of the possible way. After that remove the users from the previous role.
    Please reward points if helpfull.
    Regards,
    Vamshi

  • How do i remove the restriction code from my iphone 4s? i forgot it

    How do i remove the restriction code from my IPHONE 4S? I have forgotten what it is. PLEASE HELP!!!

    If you lose or forget a restriction passcode, you will need to perform a factory restore to remove it.
    That is what it says here http://support.apple.com/kb/ht4213
    Message was edited by: Ocean20

  • Removal of EAN code / update problem in ECC

    Hi,
    I have a problem regarding EAN codes within MDM. If a material is created within MDM and a EAN code assigned to the material and the records is syndicated to ECC it all works fine.
    Now later we find out that the EAN code is to be removed and left blank. When syndicating this change to ECC the material is not updated.
    It works fine when changing the EAN code but not when removing the EAN code.
    If you do it manually within ECC you get a warning and then the EAN code is removed. I know you also have to mark a main EAN code within the additional data -> Additional EANs and ECC assigns this automatically if you change EAN codes and automatically removes this when removing the EAN code.
    What is needed to syndicate a removal of EAN code to ECC from MDM?
    Kind regards
    Henning

    Forget about this one.

  • I would like to remove the pass code from my iphone icloud account. I hate having to log in every time ti goes to sleep.

    How do I remove the pass code from my iphone icloud account? I hate having to log in every time my phone goes to sleep.

    Welcome to the Apple community.
    settings > general > passcode lock > off.

  • Removing the country code prefix from all contacts in the Address Book

    upgrading my iphone (to os 3.0) added country codes to all of my contacts,
    not noticing this i synced it with my mac, thus adding said preixes to the contacts on my mac as well.
    is there a way (only applescript from what i understand) to remove the country code from all my contacts?
    thanks!

    paste the following into Script Editor
    <pre style="
    font-family: Monaco, 'Courier New', Courier, monospace;
    font-size: 10px;
    margin: 0px;
    padding: 5px;
    border: 1px solid #000000;
    width: 720px;
    color: #000000;
    background-color: #ADD8E6;
    overflow: auto;"
    title="this text can be pasted into the Script Editor">
    tell application "Address Book"
    set mlist to selection
    repeat with per in mlist
    set NP to number of phones of per
    repeat with i from 1 to NP
    set curphone to value of (phone i of per) as text
    if text 1 thru 4 of curphone is "+972" then
    set value of phone i of per to "0" & text 5 thru -1 of curphone
    end if
    end repeat
    end repeat
    save
    end tell</pre>
    select all the contacts you want to be affected in Address Book (you can select them all) and press "run" in script editor.

  • [svn:osmf:] 9850: Removed full screen code since it isn't working properly.

    Revision: 9850
    Author:   [email protected]
    Date:     2009-08-31 13:01:06 -0700 (Mon, 31 Aug 2009)
    Log Message:
    Removed full screen code since it isn't working properly.
    Modified Paths:
        osmf/trunk/apps/samples/framework/DynamicStreamingSample/src/DynamicStreamingSample.mxml

    You have a tool, that doesn't work in a new version of java.
    The tool vendor would be the one to determine whether the tool and/or the new VM has a problem.

Maybe you are looking for

  • My hotmail does not work on my ipad

    Hi I have just bought an i pad 3 and , with help it is now up and running..phew. But I cannot get it to access my hotmail account. Wi Fi is on as I can use safari. I put in my email and my hotmail password.... it says I cannot access the server. On m

  • What is this icon? 6220c

    When I try to call one spec mobilnumber I get an icon like this a few seconds in the window, and thats all, nothing more happens. The icon is an "unlocked"symbol with an handset under, and under that an mobil phone. What means with it?

  • Journal Entry Remarks not comming

    Hello Everyone, I am trying to create Journal Entry using  DI API .The problem i am facing is that  the remarks at the row level is not coming in certain cases. Code:- /*this is to add remarks at header level*/                        _journalEntries.

  • Error using "sdo_topo_map.add_polygon_geometry" method

    Hi to all, I have some problems using sdo_topo_map methods "add_polygon_geometry" and "create_feature". The errors occur when I try to load topological data_set (sdo_topo_geometry) from simple_feature data (sdo_geometry). I have already posted a msg

  • Java card

    Hi, I am looking for a platform to abstract form. I have to write a simple library that implements a network P2P server/Client scenario in TCP/IP or SNMP etc. The library has to be applicable for a variety of microcontroller. I thought a few years ag