Hi,
You need to use T-Code -SM18, SM19, SM20
Creating a User Audit Profile
1. Log on to any client in the appropriate SAP system.
2. Go to transaction SM19.
3. From the top-most menu bar on the Security Audit: Administer Audit Profile screen, click Profile -> Create.
4. On the Create new profile popup, type in a new Profile name and click the green Enter picture-icon.
5. On the Filter 1 tab of the Security Audit: Administer Audit Profile screen, click the BOX to the left of Filter active to place a TICK in the box. In the Selection criteria section, select the Clients and User names to be traced. In the Audit classes section, click "on" all the auditing functions you need for this profile. In the Events section, click the radio button to the left of the level of auditing you need. Once you have entered all your trace information, click the Save picture-icon. You will receive an Audit profile saved in the status bar at the bottom of the screen.
6. Please note that while the user trace profile has been saved, it is not yet active. To activate the user trace, see the next section Activating a User Audit Profile.
7. You may now leave the SM19 transaction.
Activating a User Audit Profile
1. Log on to any client in the appropriate SAP system.
2. Go to transaction SM19.
3. On the Security Audit: Administer Audit Profile screen, select the audit profile to be activated from the Profile dropdown. Click the lit match picture-icon to activate it. You will receive an Audit profile activated for next system start in the status bar at the bottom of the screen. The audit will not begin until after the SAP instance has been recycled.
4. You may now leave the SM19 transaction.
Viewing the Audit Analysis Report
1. Log on to any client in the appropriate SAP system.
2. Go to transaction SM20.
3. In the Selection, Audit classes, and Events to select sections of the Security Audit Log: Local Analysis screen, provide your information to filter the audit information. If you need to trace the activities of a specific user, be sure to include that user's ID. Click the Re-read audit log button.
4. The resulting list is displayed. This list can be printed using the usual methods.
5. You may now leave the SM20 transaction.
Also check the below Transaction
You will need to use ST03n to check the user's profile for the time period that you need.
Follow these steps.
1. Go to ST03N
2. Click on the triangle |> next to the server name
3. Double Click the time interval you need (day, month etc)
4. Click on User and Settlement Statistics --> User Profile
5. The username will show up on the right. Now click the username and it will list all the Tcodes the user executed within the time period you specified.
Also, look at this thread. This answered all my questions
Regards,
Raj.
Bluesky
