SAP ECC Security - frequently asked questions
Our consultants have put together a comprehensive list of common enquiries and responses to SAP security issues to help with basic troubleshooting and simple problem solving. The FAQs also provide useful background data to IT administrators about to start an SAP initiative.
If you have a question which is not listed here, please use the Ask the Experts form to submit a question. Your inquiry will be addressed by one of our consultants as promptly as possible.
The short answer is that you don't.
The purpose of SAP_ALL is to give full access (with some minor exceptions as standard).
Removing a transaction from SAP_ALL will not protect a function as users will still have the access to bypass the restriction which has been put in place.
Roles should be developed to grant access to the specific transaction and authorisation values required.
