08-06-2013 7:01 PM
HI,
i am fetching problem that, when i run user level report in GRC i seen that one T-code is assigned many role. but if i check in AGR_TCODES than, found that grc report is not same.
example.
as per GRC report.
user name : user1
T-code VA01 assigned to role1,role2 for the user user1.
but if I check in AGR_TCODES with T-codes than found that VA01 is only assinged role1 not role2.
thanks,
Arif
08-08-2013 7:55 AM
Hi Arif
As Prasant said - verify there is a not a manually added S_TCODE to the role - or someone mapped S_TCODE proposal via SU24
Best way - check AGR_1251 table for object S_TCODE or run SUIM Report Roles by Complex Critieria and specify the transaction code authorisations instead of transaction in menu
In addition, if the second role is a derived/child role there will be no menu values in AGR_TCODES as the AGR_TCODES are only stored for the imparting/derived. Using AGR_1251 will again show if the transaction is in the role
Also, rerun object repository sync in GRC for your roles
Regards
Colleen
08-07-2013 6:01 PM
08-07-2013 10:53 PM
AGR_TCODES collects only added tcodes from the role menu. Adding tcodes or ranges directly to S_TCODE is not a good practice
08-08-2013 12:32 AM
well i never asked to add under S_tcode just asked him to check since might be a chance,sometime
we add it based on requirement
08-08-2013 7:55 AM
Hi Arif
As Prasant said - verify there is a not a manually added S_TCODE to the role - or someone mapped S_TCODE proposal via SU24
Best way - check AGR_1251 table for object S_TCODE or run SUIM Report Roles by Complex Critieria and specify the transaction code authorisations instead of transaction in menu
In addition, if the second role is a derived/child role there will be no menu values in AGR_TCODES as the AGR_TCODES are only stored for the imparting/derived. Using AGR_1251 will again show if the transaction is in the role
Also, rerun object repository sync in GRC for your roles
Regards
Colleen