Regarding Change Authorization

[Former Member]

Hello Guru's

Ob58 tcode was assigned to few users and I would like to find out to how many users ob58 change access autiorization was given.Is there any way to find out.

Help me..

Regrds

Krithika

[Former Member]

Hello,

in table AGR_1251 (via SE16) you can look for your requested authorization object and find out roles, which have the requested authorization. Afterwards you can search for users, who have got these roles.

Or you can go via SUIM and look for users by complex selection criteria - by authorization values.

Regards,

Julia

[mvoros]

Hi,

please search before posting. Similar questions to yours have been answered on this forum. Basically, OB58 corresponds to SM30 for view V_T011 (you can see it from SE93). In SE11 you can see the authorization group assigned to this view. So you are looking for all users who have authorization for object S_TAB_DIS ACTVT = 02 and DICBERCLS = <group assigned to V_T011>. You can get the list using one of the SUIM reports.

Cheers

[Former Member]

Hi ,

Execute , SUIM --> Roles by transactions , Put tcode : OB58 , You will find list of roles who have authorization for tcode OB58 . Take list of roles and execute SE16N , Enter AGR_1251

Enter all roles in Field : AGR_NAME & Put in FIELD : ACTVT Execute it , You will find roles with all defined activites .

Now take list of roles ine excel , Filter with Activity = 2 (change).Take roles , Now Execute SUIM -- > Users by roles .

You will find list of users who have change access for tcode OB58

Let me know ,If any confusion .

Regards

Vikas

[Former Member]

I think Your Idea is right, but the steps arent accurate. It is good to follow Martin's suggestion.

WHY? the approach of checking only on the activity 02 would give you faluty results. If i have OB58 and VF02 and some other change transactions in the same role, and there is activity 02 for a host of objects but for S_TABU_DIS i have activity 03, such a role would be displayed in your list and the end user who you think can make changes using OB58, in fact cannot do it

[Former Member]

Karthik,

Follow Martin's approach as you really should be concered with the S_TABU_DIS authorization for change on that authorization group. If the user has that access pull other tcodes like "SE16N, SM30, OB58, or other table edit transactions" they will be able to edit the values.

Thanks,

Matt

[Former Member]

Hi,

By SUIM you can get the data. Goto SUIM>expand the users by complex selection Criteria>Click on By transaction Authorisations..Provide the transaction which you wanted to search the users list and click on execute... you will get the list of userids which are all having the access to particular transaction(s).