11-13-2013 3:11 PM
Dear Folks,
I am looking for ways to track self role assignments in Production and also track any changes done to roles directly in Production system.
Typically, this can be accomplished through ABAP code and I am trying to find out the logic to do this. There should be two separate programs, one for tracking self role assignments and the other for tracking role changes by Security administrator.
This is required for self auditing purposes. Can anyone throw some light on this please ?
Thanks,
Shingley
11-15-2013 1:04 PM
Hi Shingley
If you have access to Tcode SUIM ,
and below authorizations in your profile with activity 03 and 08
S_USER_AGR
S_USER_AUT
S_USER_GRP
S_USER_PRO
You can see the change docs of roles and users , what you have requested for.
SUIM-- Changedocs---
Please let us know if there is any other thing your are looking after
11-13-2013 5:47 PM
Let me first ask you, Why do you have access for role assignment, when you are not a Security administrator?
If you really observe, the logic lies there itself.. You can find the changes made by yourself.
Regards,
Rama
11-14-2013 1:14 AM
11-14-2013 2:28 AM
Hello Shingley,
Change Documents in SUIM is meant for that.
Any specific reason why you need another program for that as SUIM itself will show the results that you are asking for?
Regards,
Deepak M
11-18-2013 11:09 AM
Hi Deepak,
I just want to develop a custom program with all these features just for automatic report generation and send it to Audit via mail as an attachment, so that the manual process is reduced.
Do you have any idea about the tables involved for these activities ?
Thanks,
Shingley
11-15-2013 1:04 PM
Hi Shingley
If you have access to Tcode SUIM ,
and below authorizations in your profile with activity 03 and 08
S_USER_AGR
S_USER_AUT
S_USER_GRP
S_USER_PRO
You can see the change docs of roles and users , what you have requested for.
SUIM-- Changedocs---
Please let us know if there is any other thing your are looking after
11-18-2013 10:36 AM
Hi Pavan,
I found a standard report RSUSR100 which will report profile assignments.
Is there any such report which can be used to track role assignments (apart from CDHDR and CDPOS) ? and also for tracking any changes done to roles through PFCG ! ....
Thanks,
Karthik
11-18-2013 10:59 AM
Hi Shingley
RSSCD100_PFCG
Please go through the below post , it may be helpful to you
http://help.sap.com/saphelp_nw70ehp2/helpdata/en/90/c3e45b841f214ca32fcc17f7eb059e/content.htm
11-18-2013 1:29 PM
Hi Shingley
is your issue sorted out??
or still looking for any thing in specific ?
Cheers
Pavan M
11-18-2013 6:02 PM
Within the SUIM you can find the helpfull reports -> change documents by user/role/profile...