looking for a role/user wich does not have an special authorization object

[h3n]

Hi,

normally I can ask the sap system which user / role has an authorization object (S_BCE_68001400 or S_BCE_68001425). Is there a way to turn the question and ask for a user / role where an authorization object is not available?

An Example: I am looking for users, which does not have the authorization object F_BKPF_BES activity 01 / 02

Regards Henning

[pau_torregrosa · Accepted solution]

Hi Henning,

I would first look in agr_1251 table for all the roles that do not have those values in ACTVT Field in F_BKPF_BES, and then look for all the users that have assigned the roles obtained from the query. Your query in agr_1251 should look like this (make sure you put that wildcard with "Single Value" option, not "Pattern"):

Hope that helps.

-Pau

[h3n]

Hi Pau,

this looks like a good solution. I will try this.

Thanks

[Johan_sapbasis]

Hi Henning,

SUIM -> Search for Single Roles with Authorization Data

This is closest I seem to find, you can select w/o User Assignment and then By Authorization value search for your object?

I hope you I understood your objective correctly.