Who can create authorization object?

[Former Member]

Hi Experts,

Would like get advice from you all. May i know, normally who will create a new authorization object and class? Is it the basis or the abaper? Please advice me on the correct practice. Thanks.

Regards,

Shawn

[Former Member]

Hi Experts,

Would like get advice from you all. May i know, normally who will create a new authorization object and class? Is it the basis or the abaper? Please advice me on the correct practice. Thanks.

Regards,

Shawn

[Former Member]

Hi Shawn,

     Authorization objects are usually created by BASIS or a S&A ( Security and Authorization )consultant.

Regards,

Umar Syed.

[former_member214709]

Dear Shwan,

The authorization object can be created by the BASIS people even the ABAP Consultant can also create the authorization object.

But you can use a standard authorization object rather than creating a new authorization object.

The same can be searched using tcode su20.

Regards,

Dinesh

[Venkat_Sesha]

Hi Shawn,,

Generally Security People will do that and they will give you the Auth Object.

In some cases like Small Enterprises/Companies ABAP people will do that..

Generally BASIS people will assign the Auth Roles to your User ID..

Hope this helps..

[Former Member]

Hi Shawn,

There are instances that ABAP create a custom Authorization Objects and likewise, BASIS (Security Team) also provided the Auth Object.

Regards,

KR

[vinoth_aruldass]

Hi,

You can create authorization objects using SU20. Devoleper's and basis Team can create it.

basis Team will be preferable.

[satyabrata_sahoo3]

Hi,

Depends on how your working environment is structured. If ABAP consultant have authorization for SU20/SU21 and knowledge of it then he/she can create an Authorization object. Else always preferred to be done by a Basis/Security consultant.

At last A Basis/Security consultant adds the Auth. object into roles.

[Former Member]

Hello

Security used to have access to create an authorisation object and class but it now it requires a developer key (in the systems I used at least) so it's now an ABAP task.

Kind regards

David