SAP Security Tasks


      


  •  Creating a user role


The easiest way to create a new user role is to copy an already existing user role, either one of your own or one of the ones provided to you in the installation of SAP.  So let’s assume that you have none of your own and use one of the SAP role templates provided.  It might assist you with picking one of these roles if you have someone dump the appropriate information into a spreadsheet containing the Role Name, Role Description, Transactions contained in the Role, and the Transaction description. The SQL query would be something like this:

 

SELECT AGR_TEXTS.AGR_NAME, AGR_TEXTS.TEXT, AGR_TCODES.TCODE, TSTCT.TTEXT 
  
 FROM AGR_TEXTS, AGR_TCODES, TSTCT 
WHERE AGR_TEXTS.MANDT = ‘000′ AND
 
  
 AGR_TEXTS.SPRAS = ‘E’ AND 
  
 AGR_TEXTS.LINE = 0 AND 
  
 AGR_TCODES.MANDT = ‘000′ AND 
  
 AGR_TCODES.AGR_NAME = AGR_TEXTS.AGR_NAME AND 
  
 TSTCT.SPRSL = ‘E’ AND 
  
 TSTCT.TCODE = AGR_TCODES.TCODE 
ORDER BY AGR_TEXTS.AGR_NAME, AGR_TCODES.TCODE;

 

This query should be changed based on the details of your SAP instance.  Identify the roles(s) to be used as the source for your role copy. 

Read More…