Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Report to check the open authorization in Roles

bglobee
Active Participant
0 Kudos

Hi All,

Is there any standard SAP report or option to find out the list of roles with open authorizations(auth data incomplete) in the R/3 system?

We are on R/3 4.7.

Thanx

Balaji Srinivas

1 ACCEPTED SOLUTION

jurjen_heeck
Active Contributor
0 Kudos

I've found a solution on netweaver 2004 for which I think does work on 4.7 as well:

Use SE16 to get the data from tables AGR_1251 and AGR1252 with the following selection criteria:

For the "LOW" field open the selection subscreen, go to "exclude ranges" and in the lower limit you enter "#!" where the exclamation mark is the lowest in the ascii range (character 33) and the hash is there to escape any special meaning so SE16 will accept it. In the "upper limit" enter "ÿ", character 255. Now you've told the system not to return any row with a valid ascii character in the "LOW" field for the objects.

You may want to filter for "DELETED" <> "X" as well in AGR_1251.

Hope this helps

Jurjen

14 REPLIES 14

jurjen_heeck
Active Contributor
0 Kudos

I've found a solution on netweaver 2004 for which I think does work on 4.7 as well:

Use SE16 to get the data from tables AGR_1251 and AGR1252 with the following selection criteria:

For the "LOW" field open the selection subscreen, go to "exclude ranges" and in the lower limit you enter "#!" where the exclamation mark is the lowest in the ascii range (character 33) and the hash is there to escape any special meaning so SE16 will accept it. In the "upper limit" enter "ÿ", character 255. Now you've told the system not to return any row with a valid ascii character in the "LOW" field for the objects.

You may want to filter for "DELETED" <> "X" as well in AGR_1251.

Hope this helps

Jurjen

0 Kudos

Hi Jurjen,

I've also used the blank operator before in the table search criteria which I think would give similar results to your suggestion.

I've not got the inclination to log onto SAP this morning but I'll test it to see how it compares next week.

Cheers

Alex

0 Kudos

> I've also used the blank operator before in the table search criteria which I think would give similar results to your suggestion.

> I've not got the inclination to log onto SAP this morning but I'll test it to see how it compares next week.

I've just shut down my minisap so my check on that one will have to wait as well What do you mean by a "blank operator"? That doesn't ring any bells for me.

0 Kudos

Note-to-self for Monday morning: Check the menues of transaction SUPC and the utility reports in the same package and try to answer before Alex and Jurjen do....

0 Kudos

> Note-to-self for Monday morning:

Monday! Bwahahaha!

> Check the menues of transaction SUPC

I've only found a filter for roles without authorization data so that won't find roles which are partially filled and generated.

> and the utility reports in the same package

S_PROFGEN

AGRS_WITH_EMPTY_FIELDS, correctly named but strangely titled "Roles Without Authorization Data"

and

AGRS_WITH_EMPTY_ORGS, correctly named but strangely titled "Roles Without Organizational Data"

>and try to answer before Alex and Jurjen do....

Well, you can still try to beat Alex, but thanks for the pointers!

On a more serious note: Yes, there are reports. Use them instead of the tables. See the two above for an answer to the original question.

0 Kudos

> > and the utility reports in the same package

> S_PROFGEN

>

> AGRS_WITH_EMPTY_FIELDS, correctly named but strangely titled "Roles Without Authorization Data"

> and

> AGRS_WITH_EMPTY_ORGS, correctly named but strangely titled "Roles Without Organizational Data"

Forgot them!! Many Thanks Jurgen!!

0 Kudos

>

> Forgot them!! Many Thanks Jurgen!!

Thank Julius. He pointed me in the right direction.

Jurjen

0 Kudos

Darn. I forgot to lock the thread for the weekend

Have a good one,

Julius

0 Kudos

Just for Jurjen, If you click on the link (don't worry it doesn't take you to a gallery of Julius' winter hats) you can see what I mean:

http://thumbsnap.com/v/4N7ZwxdU.jpg

You are searching for a field which is blank. I've tested it on an IDES system and get the same results as your ascii exclusions.

On that subject could it be expected that there is a non-ascii character in the table?

0 Kudos

> http://thumbsnap.com/v/4N7ZwxdU.jpg

>

> You are searching for a field which is blank. I've tested it on an IDES system and get the same results as your ascii exclusions.

Thanks! Never knew that.

>

> On that subject could it be expected that there is a non-ascii character in the table?

Dunno. Don't think so, at least not for this table.

0 Kudos

thanks Alex, it was really a nice tip. I always used to do other combinations to filter the empty or blank list.

0 Kudos

Glad it is useful, I only started using it in the last year or so after someone pointed it out to me.

0 Kudos

From the ABAP Workbench I am used to the fact that you can double-click on almost anything and something unexpected but logical will happen.

So I go around double-clicking everything I can see. Same here - just double-click on the field.

Cheers,

Julius

0 Kudos

It's a nice gem. I'll put it on my website, next to a page about searching for * values.