SAP Authorisations

pts.
Tags:
Basis
SAP
Security
If Authorization object S_tcode has a particular transaction code then does that mean the user can only start this particular transaction or can he execute it to the fullest. e.g.If s_tcode has va01 then can he create and do everything possible with this transaction code ,or does it depend on any other objects. If a particular transaction code depends on other objects, how is it possible to check if he has full authorization for that transaction code. I mean do i have to compare the users available objects with their values with the required objects and their values that we get from the tables USOBX and USOBt. Is there any other method to find to check if a user can fully EXECUTE(not only start) the transaction

Answer Wiki

Thanks. We'll let you know when a new response is added.

The s_tcode object controls whether or not you can *start* the transaction. What you can do within any given transaction is typically controlled by by other authorisation objects.

To take your example, having VA01 in an s_tcode authorisation means you can start VA01. There are separate authorisation objects that control which sales areas and document types you can use, and many others. It is perfectly possible to have access to VA01 via an s_tcode authorisation but be unable to actually post anything.

To see what other objects are relevant for a given transaction, use SU24.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Alonsod
    You have to check the Authorizations Object ! If you create a new role, add the TCode VA01, then check the Authorizations Object (STCode in an Authorization Object which contains all the TCode of the specific role)automatically add by the system. If you give all the Authorizations in these Authorizations Objects, it will run correctly. Send me private message if you want more informations. Best regards.
    0 pointsBadges:
    report
  • Dharmeshd
    You have to assign the Start Code under S_TCODE, but you have to maintain the internal authorisation objects also. You can find other authorisation object authorisation required for a transaction with the help of SU22 or SU24 transaction.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following