Active and Inactive Objects in Roles

[former_member419637]

Hello Security Gurus,

I am trying to find a table that lists whether an authorization is active or inactive in a role. Does such a table exist? I found table AGR_1251 that lists roles and all the objects in the role, but I would like to search for only "active" authorizations. For example, I enter the following criteria:

Role: All roles that fit our naming convention

Object: S_PROGRAM

Field name: P_GROUP

Value: * (single value)

The results contain both active and inactive Authorizations for the S_PROGRAM object in the Roles. I would like to filter out the inactive authorizations. Is this possible other than using transaction SUIM?

Thank you,

Janice Derting

[jurjen_heeck]

Have a look at the field "DELETED" in AGR_1251. The inactive objects have an "X" there.

[former_member419637]

That's exactly what I need! I was using Field Labels and not Field Name and did not notice the Deleted field. Thank you!!