Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Program for tracking and reporting self role assignments and changes to roles

Former Member
0 Kudos

Dear Folks,

I am looking for ways to track self role assignments in Production and also track any changes done to roles directly in Production system.

Typically, this can be accomplished through ABAP code and I am trying to find out the logic to do this. There should be two separate programs, one for tracking self role assignments and the other for tracking role changes by Security administrator.

This is required for self auditing purposes. Can anyone throw some light on this please ?

Thanks,

Shingley

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Hi Shingley

If you have access to Tcode SUIM ,

and below authorizations in your profile with activity 03 and 08

S_USER_AGR

S_USER_AUT

S_USER_GRP

S_USER_PRO

You can see the change docs of roles and users , what you have requested for.

SUIM-- Changedocs---

Please let us know if there is any other thing your are looking after

9 REPLIES 9

Former Member
0 Kudos

Let me first ask you, Why do you have access for role assignment, when you are not a Security administrator?

If you really observe, the logic lies there itself.. You can find the changes made by yourself.

Regards,
Rama

martin_voros
Active Contributor
0 Kudos

Why don't you use SUIM -> Change Documents -> For Roles?

Cheers

former_member185447
Active Contributor
0 Kudos

Hello Shingley,

Change Documents in SUIM is meant for that.

Any specific reason why you need another program for that as SUIM itself will show the results that you are asking for?

Regards,

Deepak M

0 Kudos

Hi Deepak,

I just want to develop a custom program with all these features just for automatic report generation and send it to Audit via mail as an attachment, so that the manual process is reduced.

Do you have any idea about the tables involved for these activities ?

Thanks,

Shingley

Former Member
0 Kudos

Hi Shingley

If you have access to Tcode SUIM ,

and below authorizations in your profile with activity 03 and 08

S_USER_AGR

S_USER_AUT

S_USER_GRP

S_USER_PRO

You can see the change docs of roles and users , what you have requested for.

SUIM-- Changedocs---

Please let us know if there is any other thing your are looking after

0 Kudos

Hi Pavan,

I found a standard report RSUSR100 which will report profile assignments.

Is there any such report which can be used to track role assignments (apart from CDHDR and CDPOS) ? and also for tracking any changes done to roles through PFCG ! ....

Thanks,

Karthik

0 Kudos

Hi Shingley

RSSCD100_PFCG

Please go through the below post , it may be helpful to you

http://help.sap.com/saphelp_nw70ehp2/helpdata/en/90/c3e45b841f214ca32fcc17f7eb059e/content.htm

Former Member
0 Kudos

Hi Shingley

is your issue sorted out??

or still looking for any thing in specific ?

Cheers

Pavan M

Former Member
0 Kudos

Within the SUIM you can find the helpfull reports -> change documents by user/role/profile...