How to check missing authorizations like SU53 in SAP S/4HANA Public Cloud?

[SAPSupport]

Dear SAP,

If authorization object is missing to user then how can we identify missing objects and catalogs in S/4HANA Public Cloud?

I know that in on-premise systems we have access to backend and can use SU53, but how can we check the missing authorizations in S/4HANA Cloud?

Thank you.

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

Dear customer,

In SAP S/4HANA Cloud there's the Display Authorization Trace app, where you can enable an authorization trace for a Business User to help you analyze if any authorizations are missing or are insufficient.

You can use this app to:

• Activate or deactivate a trace
• Display authorization check results including already assigned authorizations and failed checks
• Display all business roles granting access to selected fields and values

Kindly check the following documentations for more information:

SAP Help Portal | Display Authorization Trace
SAP Help Portal | How to Create an Authorization Trace

Best regards,

SAP Support.

[alwansyah · Accepted solution]

Hi SAP, What if in Display Authorization Trace app there is no business roles available for granting access to selected fields and values?

[alwansyah · Accepted solution]

We're also facing authorization failed even the business role already assigned to the user and have unrestricted access