topic Authorization roles in Application Development and Automation Discussions

Authorization roles

Former Member — Sun, 17 Sep 2006 10:02:18 GMT

Hello folks,

Kindly let me know the table which stores the authorization roles and transactions allowed for that role.

Re: Authorization roles

Former Member — Sun, 17 Sep 2006 10:18:51 GMT

Hi,

This all depends. In some cases authorization groups must exist in a custom table before they can be used. This is true for table authorization groups (authorization group in table TBRG assigned to tables in table TDDAT via transaction SE54) and user groups (created in transaction SUGR). In some cases authorization groups are merely created when they are assigned to the object in a standard maintenance transaction (e.g. vendor master data, customer master data, material master data etc.) In other cases the authorization group has an optional validation table that is used in search helps but no where else (ABAP programs in table TPGP and TPGPT, report writer authorization groups (via table TBRG) etc. Authorization groups are essentially labels that you assign to objects (tables, programs, master data etc.) that allow authorization checks for access to the objects with the label

1) SAP Notes 7642, 20534, 23342, 33154, and 67766

2) Documentation for RSCSAUTH report

See the below SAP link for more info

http://help.sap.com/saphelp_nw04s/helpdata/en/52/67129f439b11d1896f0000e8322d00/content.htm

Regards

Sudheer

Re: Authorization roles

Former Member — Sun, 17 Sep 2006 10:22:41 GMT

In simple words ,

Suppose I have a jobrole assigned to my user id. Lets say "z:x". Now i need to find out through tables whether z:x has transaction ME22N or not. How do i do that?

Re: Authorization roles

Former Member — Sun, 17 Sep 2006 11:03:58 GMT

HI,

look at the table TSTCA(Values for transaction code authorizations)

Mark all the helpful answers

Re: Authorization roles

Former Member — Sun, 17 Sep 2006 11:20:56 GMT

See the tables:

AGR_USERS, AGR_PROF, UST04, uST12, TSTCA

Max

Re: Authorization roles

Former Member — Sun, 17 Sep 2006 16:55:28 GMT

User/Security tables

DEVACCESS

Table of development users including dev access key

USR02

Logon data

USR04

User master authorization (one row per user)

UST04

User profiles (multiple rows per user)

USR10

Authorisation profiles (i.e. &_SAP_ALL)

UST10C

Composit profiles (i.e. profile has sub profile)

USR11

Text for authorisation profiles

USR12

Authorisation values

USR13

Short text for authorisation

USR40

Tabl for illegal passwords

OBJT

Authorisation objetc table

rEGARds

vivek

please mark all the useful answers

Re: Authorization roles

uwe_schieferstein — Sun, 17 Sep 2006 20:27:03 GMT

Hello Nishant

SAP provides us with plenty of reporting functions regarding authorizations (transaction SUIM, User Information System).

For your example you could call either

- Roles -> By Transaction Assignment (check with transaction)

- Transactions -> Executable Transactions (check with role)

If you want to search DB tables directly then go for AGR_1251 and select for

OBJECT = S_TCODE
FIELD = TCD
LOW = <transaction, e.g. ME22N>

Regards

Uwe