How to Authorization object of a transaction

[Former Member]

HI,

Is there any way to find authorisation objects for some transactions like rs02,rs03,su01 etc.

I would like to know how to find authorization objects for a transaction.

Regards,

Magham.

[l_borsboom]

The best way to check the neede authorization objects is to test the functionality with a user with wide authorizations and trace this user with ST01. You then will find all the necessary authorization objects and values.

Kind regards,

Lodewijk Borsboom

• please reward points if you think this information is useful *

[Former Member]

HI,

Can you let me know ste by step, Since i havent used it before.

If i need to know authorization objects for t-code su01 how to find with st01.

regards,

Magham.

[Former Member]

You can check the same in table USOBX and USOBT.

USOBT table lists the authorization object which are associated with the Tcode

Through SE16 check the table USOBT and enter the tcode and execute to get the list of authorization objects and their fields.

USOBX lists the object which are maintained, i.e; the objects for which the authorization check happens.The ones marked Y in OKFLAG column are those for which by default auth check happens and with X are those object which are maintained through su24 for authority check

• Reward points accordingly

Junaid

[l_borsboom]

You can find more info about the system trace (ST01) <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/1f/83114c4bc511d189750000e8322d00/frameset.htm">here</a>

[Former Member]

Hi,

1. Execute SU22

2. Give the T-code

3. Select Check indicator and click on Field values

You will see all the autho object related to that particular t-code

regards,

Vinodh.

[Former Member]

HI Vinodh,

it is working for some t-codes but not for RSO2.

Regards,

Magham.

[Former Member]

Hi Magham,

The following objects are checked for RSO2

S_ADMI_FCD

S_APPL_LOG

S_DATASET

S_DEVELOP

S_DOKU_AUT

S_TABU_CLI

S_TABU_DIS

S_TCODE

S_TRANSPRT

[Former Member]

Thanks Junaid.

But if i give all thse objects to a user he will be able to access t-codes like su01 etc. How can i stop them

Regards,

Magham.

[Former Member]

Hi Magham,

If you want to restrict the user not to use a particular Tcode see that that tcode is not listed in any of the roles that are assigned to the user either in S_tcode object or in Menu tab in the PFCG .

If they exist remove them.

[Former Member]

use transaction su24, and enter your transaction to view respective objects.

Also, you can use st01.

regards,