- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
SU53 error
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-28-2012 1:14 PM
Hi all,
when i ask the end user for SU53 screen shot of error. Most of time they do not get right authorization error in SU53.
please explain why it is so ?
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-28-2012 1:25 PM
The SU53 will only show the last piece of access that the user failed on and there may be multiple access failures in a particular step.
Not sure what version of SAP you are using but in ECC6 the system will check for access that may not be necessary for what the user is doing. For example, if they are running a report, the system may check to see if they have S_ALV_LAYO with Activity 23. They don't need this to run the report but they would need it to change the layout of the report but if it was the last access checked by SAP, then it will be the one shown in the SU53.
Sometimes it is better to do an ST01 trace of the user to see what is really happening. But you must keep in mind that not all access shown in the trace is really needed (like the S_ALV_LAYO example). Do the trace, read what the authorization objects are for (you can do this in PFCG by clicking on the F1 help for that auth object) and determine if that is access that should be given to the user.
Cheers
Paula
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-28-2012 3:05 PM
You could also take a look at this note for an enhanced SU53, which might be of interest.
- SAP Managed Tags:
- Security
