How to check which Auth Checks a program in SAP does

[radinator]

Hello Experts,

I am looking for a way on how to find all AUTHORITY-CHECKs for a given transaction, report or Fiori App without manually looking through the code.

I have encountered countless situations where I added a new tile for a transaction or Fiori app and then user complained about not having access to certain information because of missing authorization settings in their role. PFCG is already a powerfull tool but doesn't always catch all auth checks since it (afaik) relies on presets for the auth objects in the SAP system.

Recently we added a 3rd party software from a company to our collection and it was my duty to create all the new tiles. Since I am getting tired of "maintaining PFCG, transport role, user complains, check SU53, maintain PFCG again, transport again, rinse and repeat" I would like to ask: Is there a already implemented transaction by SAP that I can give a transaction or report name and it spits out all the auth checks so I have a list  of "all auth checks for that report"?.

Thanks!

[olgavlachova]

Hello @radinator!

To extend role by Fiori app could be a bit challenging, but described time waste dancings in a loop have never been needed.

There are more ways howto.

As oldschool SAP Authorizations, I prefer to have prepared special test user with unlimited rights in QAS, start authtrace in background and then ask business to log into SAP using this special user and with the Fiori app do what required. Once done, I check authtrace, identify related  values and fill them into SU24. On S/4 is possible create variants for every t-code, so I do, then merge role with new values and generate profiles. If the"test task" was done right way, after that all needed rights should be in role.

Using these steps for each new rights requested in last years. Seems complicated but proven as helpful, the bonus given is the consistency kept quite easier 🙂

BR, Olga

[jurjen_heeck]

You may find some suggestions in this thread: Search for Authority Checks within Report