SAP Authorizations Optimise trace analysis - SAP Corner

Direkt zum Seiteninhalt
Optimise trace analysis
Authorization concept - recertification process
Alternatively, the maintenance of the authorization objects can also be called up via transaction SU21 (report RSU21_NEW). On the left side the individual classes and objects can be selected around then to the authorization object the existing authorization fields and short descriptions as well as over the button "documentation to the object indicate" also the documentation to the object to be called can.

Package Privileges permissions: Package Privileges are permissions that control access to development packages in the SAP HANA database. Packages contain design-time versions of objects that can be transported with this package via a delivery unit and thus made available to other systems.
SAP S/4HANA® migration audit
The AL08 transaction displays all logged-in users and their application servers. In the Server Name column, you can see which application server the user is logged on to, and which has the permission issue. Switch to this application server by calling the SM51 transaction and double-clicking the application server you are looking for. On the application server that is now active, run the permission trace as usual and review the evaluation.

SAP Note 1720401 extends the SU10 transaction (mass maintenance of users) with the previously missing option to select users by login date and password changes. The notice adds these features to the RSUSR200 report. This report can also be executed directly using the transaction SU10 and the corresponding permission. After the hint has been inserted, the transaction SU10 will be expanded to include the login data button.

Authorizations can also be assigned via "Shortcut for SAP systems".

In order for the associated security policy to be considered, you may need to include the correction provided with SAP Note 1890833.

At www.sap-corner.de you will also find a lot of useful information on the subject of SAP authorizations.


The RSUSR010 report identifies all transactions that a user is allowed to start.
SAP Corner
Zurück zum Seiteninhalt