topic Re: Regarding Change Authorization in Application Development and Automation Discussions

Regarding Change Authorization

Former Member — Tue, 20 Apr 2010 04:40:51 GMT

Hello Guru's

Ob58 tcode was assigned to few users and I would like to find out to how many users ob58 change access autiorization was given.Is there any way to find out.

Help me..

Regrds

Krithika

Re: Regarding Change Authorization

Former Member — Tue, 20 Apr 2010 06:12:51 GMT

Hello,

in table AGR_1251 (via SE16) you can look for your requested authorization object and find out roles, which have the requested authorization. Afterwards you can search for users, who have got these roles.

Or you can go via SUIM and look for users by complex selection criteria - by authorization values.

Regards,

Julia

Re: Regarding Change Authorization

mvoros — Tue, 20 Apr 2010 06:22:25 GMT

Hi,

please search before posting. Similar questions to yours have been answered on this forum. Basically, OB58 corresponds to SM30 for view V_T011 (you can see it from SE93). In SE11 you can see the authorization group assigned to this view. So you are looking for all users who have authorization for object S_TAB_DIS ACTVT = 02 and DICBERCLS = <group assigned to V_T011>. You can get the list using one of the SUIM reports.

Cheers

Re: Regarding Change Authorization

Former Member — Tue, 20 Apr 2010 06:48:03 GMT

Hi ,

Execute , SUIM --> Roles by transactions , Put tcode : OB58 , You will find list of roles who have authorization for tcode OB58 . Take list of roles and execute SE16N , Enter AGR_1251

Enter all roles in Field : AGR_NAME & Put in FIELD : ACTVT Execute it , You will find roles with all defined activites .

Now take list of roles ine excel , Filter with Activity = 2 (change).Take roles , Now Execute SUIM -- > Users by roles .

You will find list of users who have change access for tcode OB58

Let me know ,If any confusion .

Regards

Vikas

Re: Regarding Change Authorization

Former Member — Tue, 20 Apr 2010 11:42:24 GMT

I think Your Idea is right, but the steps arent accurate. It is good to follow Martin's suggestion.

WHY? the approach of checking only on the activity 02 would give you faluty results. If i have OB58 and VF02 and some other change transactions in the same role, and there is activity 02 for a host of objects but for S_TABU_DIS i have activity 03, such a role would be displayed in your list and the end user who you think can make changes using OB58, in fact cannot do it

Re: Regarding Change Authorization

Former Member — Tue, 20 Apr 2010 17:36:13 GMT

Karthik,

Follow Martin's approach as you really should be concered with the S_TABU_DIS authorization for change on that authorization group. If the user has that access pull other tcodes like "SE16N, SM30, OB58, or other table edit transactions" they will be able to edit the values.

Thanks,

Matt

Re: Regarding Change Authorization

Former Member — Tue, 27 Apr 2010 14:28:29 GMT

Hi,

By SUIM you can get the data. Goto SUIM~~>expand the users by complex selection Criteria~~>Click on By transaction Authorisations..Provide the transaction which you wanted to search the users list and click on execute... you will get the list of userids which are all having the access to particular transaction(s).