Report all authorization values for user

[Former Member]

All,

I have been tasked with reporting all authorization values for a set of users from our organization. Without going into each role through PFCG, displaying authorization data, expanding each tree, and exporting., I do not see a good way to do this. I understand that the data will probably not mean much to those who are asking for it. But I still have to get the data. I also tried by running transaction S_BCE_68001394 but then again, I have to expand each individual profile and each object underneath. Is there a better way to accomplish this task?

Thank you all,

Michael

Edited by: Michael Jaynes on Sep 1, 2009 11:04 AM

[Former Member]

You could try joining tables AGR_USERS, AGR_1251 and AGR_1252. I'm not sure if that's 'doable' in SQVI but if the set of users isn't too big you can consider downloding the appropriate selections and linking them in a spreadsheet.

[jurjen_heeck]

You could try joining tables AGR_USERS, AGR_1251 and AGR_1252. I'm not sure if that's 'doable' in SQVI but if the set of users isn't too big you can consider downloding the appropriate selections and linking them in a spreadsheet.

[Former Member]

Thank you for the reply. I am very unfamiliar with SQV1 and am not getting any real data from it. I have about 50 users I need to report on.

I am looking for the opposite report you get from transaction S_BCE_68001396. Thank you.

Edited by: Michael Jaynes on Sep 1, 2009 2:23 PM

[sdipanjan]

1. Users by Complex Selection Criteria -> Put all users by Multiple selection

2. Click on Display Details button (left one in the Application Toolbar).

3. Select the User Name node and click on the "Expand Subtree" button.

4. It will show the full list of authorization data available for that particular user

Download the whole list in the format you want to review..

Please Note that the main drawback of this method is that you need to select and download the details of the users individually.

Regards,

Dipanjan

[Former Member]

I was already using the Users by Complex Criteria method. Only drawback there for me was it lists the profiles individually instead of a consolidated view. For example if a user had auth object F_BKPF_KOA with activity 03 for Account Type K in one role and activity 01 for Account type D, K, & S in another role, you really weren't getting the whole picture. Like finding a needle in a haystack.

Luckily one of our ABAP guys is writing me a custom program to display the data and so far looks good with a little cleaning up.

Thank you all for your help.