Not sure if your field of expertise but I give it a shot. Creating a new activity group by inserting the SAP_ALL profiles. What I'd like to know if there is a way to remove a specific TCODE from the S_TCODE as it contains an "*" in the activity group.
Since "*" means all transactions then you would have to type the transactions that you want the activity group to allow. This is not very practical obviously. The best thing to do is to find out what authorization objects the transaction you want to remove has so you can inactivate them. This way even if the user can execute the transaction, he/she will not be able to do anything with it.
If you don't know what auth. objects are related to a specific transaction, you can create a tiny activity group with this just one transaction. Then when you navigate through the authorization data screen you will be able to see the auth. objects.
Dig Deeper on SAP Basis
Can SAP developer include authority check for S_TCODE in a called transaction?
How SAP user authorization tool works when a TCODE is executed
Is it possible to perform a mass deletion of a particular transaction from all users?
If a user has an authorization for a transaction, will he absolutely be able to start it?
Related Q&A from Giovanni Davila
Learn how to transfer a client from one server to another in this administration tip from Basis guru Giovanni Davila. Continue Reading
Learn fundamentals of transport management and STMS from Basis guru Giovanni Davila in this expert tip. Continue Reading
Giovanni Davila, Basis expert, provides advice on how to copy all SAP users from one system to another in this tip. Continue Reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.