Report showing what User accessed at the object level.

[Former Member]

HI All,

Is there any tcode/table/report that shows what a partilucar User accessed at the object level.

Whenever we execute any tcode/report internally SAP checks/activates auth.objects (for e.g S_TCODE is always checked at the start of a transaction) for the User to be able to execute that tcode/report.

I would like to know is there any way by which we can get a report for a User (e.g.OSS connection) that shows me that XYZ object was checked/activated/failed when user executed ABC transaction.

Security Audit logs did not help on this.tried STAD also. not sure if ST03N provides such report

Any help would be greatly appreciated.

[Former Member]

Hi,

You will have to switch on the trace using ST01 for a perticular User/Transaction. Once the activities are completed, switch off the trace and open the file. This file would show you all the objects that were checked.

The following is the procedure for ST01:

<u>Authorization Trace ST01</u>

You can analyze authorizations as follows: Choose Tools -> Administration -> Monitor -> Traces -> SAP System Trace or Transaction ST01.

- Choose trace component Authorization check and pushbutton Trace on. The trace is automatically written to the hard disk.

- To limit the trace function to your own sessions, choose Edit -> Filter -> Shared. Enter your user ID in field Trace for user only in the displayed dialog box.

- Once the analysis is completed, choose Trace off.

- To display the results of the analysis, choose Goto -> Files/Analysis or the pushbutton File listSelect the required file and choose Analyze.

- The results of the authorization check are displayed in the following format: <Authorization object>:<Field>=<Tested value>

The return code shows whether or not the authorization code was successful.

ST01 Return Code 0 - Authorization check passed

1 - No Authorization

2 - Too many parameters for authorization check

3 - Object not contained in user buffer

4 - No profile contained in user buffer

6 - Authorization check incorrect

7,8,9 - Invalid user buffer

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

santosh

[Former Member]

I already know about ST01 but most of the time it is used only when some authorization error analysis is to be done.I agree it shows what objects are being c Is it feasible to keep the trace active for a particular user for 3-4 days?.I believe ST01 consumes considerable memory.

Hence, I wondered if there is any such report.