Creating an SAP_ALL Display Only Role
Often, after the project is completed, there’s a need to display the system and configuration in Production server for data analysis.
To achieve this, we can adopt existing SAP_ALL profile and adjust it so that user access the system in display mode only.
Many SCN posts tell you to export the role to notepad, and then change the “ACTVT” field value to “03”.
Well, this is not entirely true. You may got decent working role, but since you are not dealing with only one activity code, you can’t ensure that your role will work flawlessly across departments in your company.
Common display activity codes are 03, 04, 08, 09.
Some modules uses 27, 28, 29, 53, 54, A5, etc.
You can check table TACT to list all display-related activity.
Having said that, you won’t know either whether an ACTVT field can have value 03, 04, both, or all values except to browse the field one by one and maintain it manually.
This is a very time consuming process, but in the end you can finally have a reusable role that work across your projects.
Good news is, I have gone through this and you can download the role below.
It has been validated using table AGR_1251 and contain only display values across tons of object.
System: ECC 6.0 EhP7
two pans of pizza were harmed during making process
<Downloadfile removed by moderator!>