15 pts.
 No Authorisation in creating a Role
Hi, I've created a new client (501). Copied "SAP USER MAster" profile (not SAP_ALL) from client 000 to this new client (501). I created a master user (with SAP_ALL & SAP_NEW) in 501. Then I created another user "BASIS" without assigning any profile to it while creation. Now, for the user "basis", I created a role as "basisrole" with many imp basis tcodes (db02, db13, db12, pfcg, rz10, scc1, scc3, scc4, scc5, scc9, sccl, se01, se38, sm30, sm36, sm37, st01, st02, st10, st22, stms, su01, su10, su21, su53, sugr, suim). While creating this role, I've assigned it to user "basis" as per procedure. Now the problem is when I'm trying to create a role (say, "role1") with user "basis" , I'm encountering with the Message - "No Authorisation to change role role1". I've checked with SU53 to check authorisation. But it shows all ok. Plz help to sort out this problem.

Software/Hardware used:
ASKED: February 25, 2012  1:05 PM
UPDATED: March 29, 2012  8:42 PM

Answer Wiki:
to change an existing role you need trx: pfcg and the right for change the role " this can be configured name dependant for different user / departments. But keep in mind that this is an Complient issue! role admin should not be the same like Basis, very similar like booking and controlling, this is an risk which need to recognized.
Last Wiki Answer Submitted:  March 29, 2012  8:41 pm  by  edv4you   155 pts.
All Answer Wiki Contributors:  edv4you   155 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _