This role contains the minimum permissions needed for User Creation,
Role Assignment and Emergency Access request write-backs.
Note: For SAP R/3 4.5B, the authorization object S_USER_VAL is not needed
in the role, as the authorization object does not exist in that SAP version.
Authorization object - S_RFC
| Attribute
|
Attribute value
|
| Activity (ACTVT)
|
16
|
| Name of RFC to be protected (RFC_NAME)
|
SU_USER
|
| Type of RFC to be protected (RFC_TYPE)
|
FUGR
|
Authorization object - S_TABU_DIS
| Attribute
|
Attribute value
|
| Activity (ACTVT)
|
03
|
| Authorization Group (DICBERCLS)
|
PC,SC
|
Authorization object - S_USER_AGR
| Attribute
|
Attribute value
|
| Activity (ACTVT)
|
02, 03, 22
|
| Role Name (ACT_GROUP)
|
*
|
Authorization object - S_USER_AUT
| Attribute
|
Attribute value
|
| Activity (ACTVT)
|
02, 03, 08, 22
|
| Authorization Name in User Master Maintenance (AUTH)
|
*
|
| Authorization Object in User Master Maintenance (OBJECT)
|
*
|
Authorization object - S_USER_GRP
| Attribute
|
Attribute value
|
| Activity (ACTVT)
|
01, 02, 03, 05, 22
|
| User Group in User Master Maintenance (CLASS)
|
*
|
Authorization object - S_USER_PRO
| Attribute
|
Attribute value
|
| Activity (ACTVT)
|
03, 08, 22
|
| Auth. Profile in User Master Maintenance (PROFILE)
|
*
|
Authorization object - S_USER_VAL
| Attribute
|
Attribute value
|
| Field Name (AUTH_FIELD)
|
*
|
| Authorization Value (AUTH_VALUE)
|
*
|
| Authorization Object in User Master Maintenance (OBJECT)
|
*
|
Authorization object – PLOG
| Attribute
|
Attribute value
|
| nfotype
|
*
|
| Planning Status
|
*
|
| Object Type
|
*
|
| Plan Version
|
*
|
| Function Code
|
DEL, INSE
|
| Subtype
|
*
|
Authorization object – S_TCODE
| Attribute
|
Attribute value
|
| Transaction code(TCD)
|
PFCG, SU01, SM36, SM37
|
Authorization object - S_USER_SAS
User master Maintenance : System-specific Assignments
| Attribute
|
Attribute value
|
| Activity(ACTVT)
|
01 , 22
|
| Role Name(ACT_GROUP)
|
*
|
| User group In user master maintenance (CLASS)
|
*
|
| Auth Profile in user master maintenance(PROFILE)
|
*
|
| Receiving system for central user
administration(SUBSYSTEM)
|
*
|