R/3 custom role last used for specific UserID

[Former Member]

Due to a recent R/3 Security Audit, we are trying to determine when a User has most recently used a custom Z role that has been provided for the user (role applied to the user's position). Do you know if this is possible?

[polina_klibanova]

Hi,

infos concerning the checked auth. objects are only in the auth. traces (st01). You can create the trace lists and then compare them with the objects from your Z-roles. But it's very time expensive if you make it manuelly.

Polina

[Former Member]

Go to T-Code SUIM

select

Change Documents

select User name if you have user list or enter *(For role assignment also as per your req.)

specify date range

Enter changed by if you want to find out changed by

Uncheck all

Check added profile & deleted profile

Execute

If you want T-Codes also select Technical view.

[Former Member]

Hi,

As of now we don't have provision to know directly whether a role is used by a usre or not (transactions from it) but if you have info on which user had accessed which tcode then you can get drill down by using AGR_USERS( this will give info of users assigned to roles) and AGR_TCODES (this will give you info of tcodes assigend to the users).

If you don't have data of users access tcodes then you can think of using ZRBE program which will give you info of user name and tcode used by him about period of 6 months. In this case agin you have to do a manual work of using AGR* reports to get what you requred.

Thank you,

Shyam