Discrepancy while finding the t code through user id in SUIM

[Former Member]

Hi

While finding out the particular t code like MIRO from SUIM -> Trancation code ->User

i m unable to find the same in the list but if i search through the role through PFCG its been displaying the same but not through SUIM -> Transaction code by user id . what is the cause for the same ?

how can i find the discrepancies for the same ?

regards

Shilpa

[Former Member]

Hi Shilpa,

This is because SUIM> Search by Users>Tcode will look for the Tcode assigned to the roles in the Menu tab. There might be a possibility that a Tcode is added as a manual instance of S_Tcode object. Hence to avoid that its always best practise to search for the values inside the S_Tcode object. You can do this either by SUIM or by SE16(Table:agr_1251)

[jurjen_heeck]

> You can do this either by SUIM or by SE16(Table:agr_1251)

When searching the table directly please mind that there may be ranges (both LOW and HIGH field filled) as well and those records will not show up when searching for a transaction in the LOW field. SUIM evaluateds ranges as well and therefor is more reliable.

[mvoros]

Hi,

the PFCG search returns a list of roles which have assigned one particular transaction. The assignment is stored in table AGR_TCODES. Your SUIM report returns a list of executable transactions for one user. You can give a user authorization to multiple transactions without adding them to role menu.

Cheers

[Former Member]

Thats ok but why it is generating the inconsistency while searching the t code from SUIM.

even though the t code is present in S_tcode object

Regards

Shilpa

[jurjen_heeck]

> Thats ok but why it is generating the inconsistency while searching the t code from SUIM.

> even though the t code is present in S_tcode object

That's because some of the SUIM reports look in the role menu instead of the actual S_TCODE values.

[Former Member]

Hi Shilpa,

Just to elaborrate more on this. There are two possibilities:

1 - If there are manual instances of S_Tcode object then the tcodes added in the Menu tab of the role will be added to the standard instanct of S_tcode and not the manual instance of S_tcode. Hence if you have added for example SU01 in the manual instance of S_Tcode of Role (ABC) and not in the Menu tab of the same role (ABC) then the SUIM Tcode> role search will not show the role(ABC) having Tcode SU01. However if you search this role by S_Tcode values you will get this role name(ABC) displayed among the roles having SU01 Tcode.

2 - If in SU24 there are Tcodes which are checked (Y) for multiple S_TCODE values. For example:

Tcode SXMB_IFR in SU24 below object and field value is marked as Check(Y)

Object: S_Tcode Value: SU01

Then as and then you add Tcode:SXMB_IFR to any role and re-merge /generate authorization then automaticallu SU01 will be included in the standard instance of S_TCode. In this case also if you do a search in SUIM Role> Tcodes then also you will not see the above role listed for SU01 Tcode. As the SU01 is not added in the menu tab of the role but it was pulled by SU24 as a dependent of SXMB_IFR . However S_Tcode search will list out the above role.

Hope this helps.

[Former Member]

thx all but still the confusion exists

[Former Member]

Hi Shilpa,

Do this test to understand the logic explained in above posts.

Create a new role and manually add the authorization tab S_Tcode and then add tcode in S_Tcode(Not in Menu Tab).

Now if you save and generate the role you will find there is no Tcode in Menu tab but if you assign this role to any user he will be able to execute the tcode.

Now compare the SUIM and AGR_1251 report.

Hope this helps to clear the confusion.

Warm Regards,

Rajesh

[Former Member]

Hi

I understand that you are having two different results for different methods of search.

Do you want to find out the Transaction that are executable by a User.

Then SUIM --> Transactions --> Executable for User Is the Right Option.

You Said Through PFCG, How are you searching through PFCG, Are you Displaying the Role and then checking the User Tab.

Please let me know How are you searching through PFCG to clarify your problem.

Br

Mohan