Restrict Transaction Code for Particular User

[Arthur Wang]

Question

How can we block transaction code for particular user in single role?

We have to received requirement from customer end to restrict VA01, VA02 transaction code for particular user. Is this possible?

For example, we are having single role with multiple transaction code and it is mapped with more than 20 users. Out of the 20 users, 3 users are not supposed to use VA01, VA02 transaction without creating new roles.

Answer:

Some get around suggestion for this as you may not be able to block a particular tcode for a user who is already been assigned to roles.

Option 1 (highly recommended one)

You have to copy the existing role to a new_role and remove the t-codes from it.
Remove those users from the existing role to a new role

Option 2 (if you still do not want to create new roles)

Get your abaper help and handle it through Exit – in MV45AFZZ
There will be user exit called read_documet where you can put your validation by checking the user name sy-uname and display the message and block it.

[Author]

Posts