SAP Security Question:
How to add custon t-code to a role and how to find the auth obj of custom t-code.
if the custom t-code doesnt have auth obj, will you save and generate the role?
Answer:
Before adding custom t-code to a role we should see if there any authorization objects maintained for this t-code in SU24, If not we should maintain. Also we need to find authority check in the program related to the custom t-code by using t-code SE93. If the custom t-code doesnt have auth object sas an exception it should all authorization groups S_TABU_DIS. If the t-code satisfies any one condition we can save and generate the role.
| Previous Question | Next Question |
| What is offline risk analysis? | What is the rule set in GRC? |