10-09-2009 3:16 PM
Hi All,
Is there any standard SAP report or option to find out the list of roles with open authorizations(auth data incomplete) in the R/3 system?
We are on R/3 4.7.
Thanx
Balaji Srinivas
10-10-2009 8:15 AM
I've found a solution on netweaver 2004 for which I think does work on 4.7 as well:
Use SE16 to get the data from tables AGR_1251 and AGR1252 with the following selection criteria:
For the "LOW" field open the selection subscreen, go to "exclude ranges" and in the lower limit you enter "#!" where the exclamation mark is the lowest in the ascii range (character 33) and the hash is there to escape any special meaning so SE16 will accept it. In the "upper limit" enter "ÿ", character 255. Now you've told the system not to return any row with a valid ascii character in the "LOW" field for the objects.
You may want to filter for "DELETED" <> "X" as well in AGR_1251.
Hope this helps
Jurjen
10-10-2009 8:15 AM
I've found a solution on netweaver 2004 for which I think does work on 4.7 as well:
Use SE16 to get the data from tables AGR_1251 and AGR1252 with the following selection criteria:
For the "LOW" field open the selection subscreen, go to "exclude ranges" and in the lower limit you enter "#!" where the exclamation mark is the lowest in the ascii range (character 33) and the hash is there to escape any special meaning so SE16 will accept it. In the "upper limit" enter "ÿ", character 255. Now you've told the system not to return any row with a valid ascii character in the "LOW" field for the objects.
You may want to filter for "DELETED" <> "X" as well in AGR_1251.
Hope this helps
Jurjen
10-10-2009 9:51 AM
Hi Jurjen,
I've also used the blank operator before in the table search criteria which I think would give similar results to your suggestion.
I've not got the inclination to log onto SAP this morning but I'll test it to see how it compares next week.
Cheers
Alex
10-10-2009 10:03 AM
> I've also used the blank operator before in the table search criteria which I think would give similar results to your suggestion.
> I've not got the inclination to log onto SAP this morning but I'll test it to see how it compares next week.
I've just shut down my minisap so my check on that one will have to wait as well What do you mean by a "blank operator"? That doesn't ring any bells for me.
10-10-2009 11:26 AM
Note-to-self for Monday morning: Check the menues of transaction SUPC and the utility reports in the same package and try to answer before Alex and Jurjen do....
10-10-2009 2:09 PM
> Note-to-self for Monday morning:
Monday! Bwahahaha!
> Check the menues of transaction SUPC
I've only found a filter for roles without authorization data so that won't find roles which are partially filled and generated.
> and the utility reports in the same package
S_PROFGEN
AGRS_WITH_EMPTY_FIELDS, correctly named but strangely titled "Roles Without Authorization Data"
and
AGRS_WITH_EMPTY_ORGS, correctly named but strangely titled "Roles Without Organizational Data"
>and try to answer before Alex and Jurjen do....
Well, you can still try to beat Alex, but thanks for the pointers!
On a more serious note: Yes, there are reports. Use them instead of the tables. See the two above for an answer to the original question.
10-10-2009 2:18 PM
> > and the utility reports in the same package
> S_PROFGEN
>
> AGRS_WITH_EMPTY_FIELDS, correctly named but strangely titled "Roles Without Authorization Data"
> and
> AGRS_WITH_EMPTY_ORGS, correctly named but strangely titled "Roles Without Organizational Data"
Forgot them!! Many Thanks Jurgen!!
10-10-2009 2:29 PM
>
> Forgot them!! Many Thanks Jurgen!!
Thank Julius. He pointed me in the right direction.
Jurjen
10-10-2009 6:29 PM
Darn. I forgot to lock the thread for the weekend
Have a good one,
Julius
10-12-2009 11:51 AM
Just for Jurjen, If you click on the link (don't worry it doesn't take you to a gallery of Julius' winter hats) you can see what I mean:
http://thumbsnap.com/v/4N7ZwxdU.jpg
You are searching for a field which is blank. I've tested it on an IDES system and get the same results as your ascii exclusions.
On that subject could it be expected that there is a non-ascii character in the table?
10-12-2009 12:15 PM
> http://thumbsnap.com/v/4N7ZwxdU.jpg
>
> You are searching for a field which is blank. I've tested it on an IDES system and get the same results as your ascii exclusions.
Thanks! Never knew that.
>
> On that subject could it be expected that there is a non-ascii character in the table?
Dunno. Don't think so, at least not for this table.
10-12-2009 2:06 PM
thanks Alex, it was really a nice tip. I always used to do other combinations to filter the empty or blank list.
10-12-2009 2:20 PM
Glad it is useful, I only started using it in the last year or so after someone pointed it out to me.
10-12-2009 2:44 PM
From the ABAP Workbench I am used to the fact that you can double-click on almost anything and something unexpected but logical will happen.
So I go around double-clicking everything I can see. Same here - just double-click on the field.
Cheers,
Julius
10-12-2009 2:44 PM
It's a nice gem. I'll put it on my website, next to a page about searching for * values.