How to find the T-codes that's in a Single Role & Composite Role??

[Former Member]

Hi all,

Some of the user have authorization to particular t-codes. However single roles are not created for them.

Now I need to assign authorization to that particular t-code to a new employee.

Since the single role is not there, I do not know how to find if it is inside a composite role.

Which table should I find all the t-codes that are assigned to a single role / composite role?

pls help.

Regards,

Pri

[Former Member]

Hi,

Enter into the composite role in display mode.

Go to >Role tab>you will find all the roles used.

Using Table AGRS_AGRS you can find the roles used for the composite role.

Table AGRS_TCODES give the roles with their tcode assignment.

Anyways this can be done using SUIM.

SUIM>Transactions>Executable for Role-->give the role name and execute.

You will get an list of Tcodes used in the role.

Rakesh

[jurjen_heeck]

>

> Table AGRS_TCODES give the roles with their tcode assignment.

Beware of AGR_TCODES, it only reports transactions entered into the role menu. If you query table AGR_1251 filtered on object S_TCODE you get the actual transaction authorizations.

Besides that, authorizations are always in single roles, so if you cannot find them there there's no point in searching through the composites.

[Former Member]

Hi,

It is possible that the transaction is added by a hand made profile. Go to the system and perform transaction su56. Change the user name in that from the user you know who have this transaction. Select object s_tcode and search for the transaction. You see the profile name that you can look into with transaction su02. Look into the user with su01 and see if there are profiles that are not generated. With those names you can do your trick in su02.

have fun

bye

Jan van Roest

[Former Member]

Use SUIM to check with T-code is assigned to Which Role.

SUIM -> Roles - By Transaction Assignment.

Cheers

Shaji

[jurjen_heeck]

>

> Use SUIM to check with T-code is assigned to Which Role.
> 
> SUIM -> Roles - By Transaction Assignment.

Once again, beware. This report queries AGR_TCODES. See my earlier post.

Roles - By authorization values, object S_TCODE is more reliable.