Authorization roles

[Former Member]

Hello folks,

Kindly let me know the table which stores the authorization roles and transactions allowed for that role.

[Former Member]

Hi,

This all depends. In some cases authorization groups must exist in a custom table before they can be used. This is true for table authorization groups (authorization group in table <b>TBRG</b> assigned to tables in table <b>TDDAT</b> via transaction SE54) and user groups (created in transaction <b>SUGR</b>). In some cases authorization groups are merely created when they are assigned to the object in a standard maintenance transaction (e.g. vendor master data, customer master data, material master data etc.) In other cases the authorization group has an optional validation table that is used in search helps but no where else (ABAP programs in table <b>TPGP</b> and <b>TPGPT</b>, report writer authorization groups (via table <b>TBRG</b>) etc. Authorization groups are essentially labels that you assign to objects (tables, programs, master data etc.) that allow authorization checks for access to the objects with the label

1) SAP Notes 7642, 20534, 23342, 33154, and 67766

2) Documentation for RSCSAUTH report

See the below SAP link for more info

http://help.sap.com/saphelp_nw04s/helpdata/en/52/67129f439b11d1896f0000e8322d00/content.htm

Regards

Sudheer

[Former Member]

In simple words ,

Suppose I have a jobrole assigned to my user id. Lets say "z:x". Now i need to find out through tables whether z:x has transaction ME22N or not. How do i do that?

[Former Member]

Hi

See the tables:

AGR_USERS, AGR_PROF, UST04, uST12, TSTCA

Max

[Former Member]

User/Security tables

DEVACCESS

Table of development users including dev access key

USR02

Logon data

USR04

User master authorization (one row per user)

UST04

User profiles (multiple rows per user)

USR10

Authorisation profiles (i.e. &_SAP_ALL)

UST10C

Composit profiles (i.e. profile has sub profile)

USR11

Text for authorisation profiles

USR12

Authorisation values

USR13

Short text for authorisation

USR40

Tabl for illegal passwords

OBJT

Authorisation objetc table

rEGARds

vivek

please mark all the useful answers

[uwe_schieferstein]

Hello Nishant

SAP provides us with plenty of reporting functions regarding authorizations (transaction SUIM, User Information System).

For your example you could call either

- Roles -> By Transaction Assignment (check with transaction)

or

- Transactions -> Executable Transactions (check with role)

If you want to search DB tables directly then go for <b>AGR_1251</b> and select for

OBJECT = S_TCODE
FIELD = TCD
LOW = <transaction, e.g. ME22N>

Regards

Uwe

[Former Member]

HI,

look at the table <b>TSTCA</b>(Values for transaction code authorizations)

Mark all the helpful answers