In a couple of months one of our SAP environments will need to be DISPLAY only.
All data, users etc… is slowly being replicated in a brand new SAP system. As the responsible of the SAP Security accesses, the business is asking me to make a plan on how we could turn the (switch OFF) to display only.
Honestly I have no idea except trying to find all roles with display access only, assigning them and hope that will do the job. There are +1000 roles in Prod and I don’t want to start changing the roles because that will require people to test all changes.
They need to be able to access the data (But I don’t know what exactly). Does somebody know or have an idea on what I could propose as match plan.
All ideas are welcome 
Thanks Nancy