You are working as a SAP Security Admin and there they go again! Users call you up and demand to give them access so that they can change layout sets in transaction VA05. The users are screaming: Give me SAP_ALL, Give me everything! I cannot work! The option to save layout is grayed out!
Well, first thought is, that you would not allow them to change global layouts (S_ALV_LAYO), but that may not be the case.
The screen shot above will be the same for users that have access to SAP_ALL profiles, including S_ALV_LAYO. The solution to this puzzle is a parameter entry in the user master record:
- SD_VARIANT_MAINTAIN “A” -> Variants can be changed throughout the system.
- SD_VARIANT_MAINTAIN “U” -> Variants can be changed at user level.
- SD_VARIANT_MAINTAIN ” ” -> Variants cannot be changed.
To illustrate the values, see a couple of screen shots below. Please note that you have best security setup if you dis-allow users from changing layouts by not giving access to object S_ALV_LAYO. You may create a plug-in role just with the layout objects for super users or support users. Results may vary depending on release.
SD_VARIANT_MAINTAIN “A” -> Variants can be changed throughout the system.
SD_VARIANT_MAINTAIN “U” -> Variants can be changed at user level. This setting even dis-allows the setup of layouts if the user has access to S_ALV_LAYO:
Add
Add
Comments