Authority Check Trace in SAP

Often it is difficult to say, which Authority Objects are needed for certain processes in SAP. To avoid too many authorities for technical users in a productive system, the following steps should help to assign only the authority objects that are really needed for transaction exection:

  • Create an authority check trace in your test system
  • Create a profile that conatins only the needed objects
  • Assign the profile to the User

ST01Trace

Note! The steps described below should only be done together with you System Administrator.

Continue Reading…

Deactivate an Account in SAP

This report de-activates the account of the specified user. This can be used as a utility to SAP BASIS people.

Please be cautious of its use, and thus should be used correctly.

Continue Reading…

Applying Multiple Authority-checks in ABAP Program

Multiple Authority-checks mainly depends on hierarchy of Authorizations apart from its dependency on the way pragrammer handles it.

Multiple Authority-checks can be of two types depending upon the programming logic and needs.

Continue Reading…

Restricting SAP Queries from execution

You can restrict users from executing your queries, by assigning  Authorization Group to Query Infoset. Now,  users having the authorization to the Authorization Group can execute the Query.

Continue Reading…

Assign/Create Authorization Group for a Table in SAP

Many times an ABAPer or Functional consultant gets the Message ‘You are not authorized to display this table’, when viewing tables, even ZTables. Tables by defualt are created with Authorization Object S_TABU_DIS and Authorization Group &NC&.

Basis Team, as part of Audit/security may not allow this authorization on Tables.

Continue Reading…

Page 1 of 212