Mass Maintenance of Authorization Values (New transaction PFCGMASSVAL)
Ritesh H Soni CISA l CRISC I SAP Security/GRC Certified
GRC | Risk | Controls | Line 1 I Tech Assurance l SAP l IAM
We have new tools available from SAP which most of the consultants don't utilise in daily tasks. This tool will definitely help any consultants to efficiently and productively change several authorisations, organisation values at the same time.
In this example let us change 2 roles called ZTEST and ZTEST1 at the same time and The add the organisational value(s) - CC01, CC02 for authorisation field - $BUKRS
The change option can be used for - Adding, Removing All Values and Replacing. You can see that we are adding 2 values CC01 and CC02 at the same time.
You can run it in Simulation Mode and check results
Once all data looks good then you can execute with correct mode
- Direct Execution
In this mode the changes are made immediately and displayed in a results list.
You can use this transaction for several activities :
- Change Organizational Levels
- Change Field Values of Authorizations for an Object
- Change Field Values of Authorizations for a Field (Cross-Object)
- Add a Manual Authorization to an Object
Business Process Management (BPM) | SAP S/4HANA Security & Authorization
1 年Is there any way I can change the BUKRS of 100 company codes in 1 shot? I can use pfcgmassval but time consuming since need to enter 1 by 1 role. Or any other options I can use this? Appreciate your advice thank you!
Senior Technical Lead, SAP Basis Admin
2 年Hello Can I use PFCGMASSVAL to mass lock/unlock of users during production system maintenance ?
Lead SAP security Consultant @ Government of Canada | SAP Certified Application Associate
2 年It's not recommended to perform mass maintenance of roles . I never get this kind of requirement and I don't encourage to perform mass maintenance of roles as each role is unique and assigned to many folks in organisation
Project manager | Senior Sap Consultant
2 年Efrat Ben Zrihen