Search a function by a permission.

[Former Member]

Hello SCN Community,

We are looking to find functions that contain the SAP authorization object S_IDOCMONI. We are able to search by actions (BD87 for example) that contain S_IDOCMONI, but not S_IDOCMONI directly. Does anyone know of a method to do this ? If not directly could there be a table that contains the information ?

Many Thanks !

Jamie

[Colleen · Accepted solution]

Hi James

I did a quick check and came up with some possible options

1. Straight SE16 table. Function to Permission is table GRACFUNCPRM - if you look at the GRACFUN* tables they are the definitions and relationships for RAR functions. The field you would need for the object is RESOURCEID = S_IDOCMONI

2. IMG Download of the SoD Rules

IMG > Governance, Risk and Compliance > Access Control > Access Risk Analysis > SoD Rules > Download SoD Rules (program GRAC_DOWNLOAD_RULES) will export to text file

3. NWBC Report - Access Rule Details - this one looks like it will only apply to functions that are assigned to a risk. However, you can run this report for the Rule Set and the Permission Object

There might be a better report. It doesn't look like the Query on the Function screen allows you to filter on permission (seems to be action though). Maybe go through the other NWBC reports and see if any suit or look at creating own if end users need to run it to avoid SE16 and IMG

[Former Member]

Hello Collen,

These options work great ! Thanks for your prompt response.

Jamie