Fire fighter id assignments reduction - SE16D - Ideas \ Best practices

[former_member245311]

Dear Friends, Fire fighter id's assignments for both business and IT users has grown out of proposition with one of our clients. I am in the process of analysis.
Two aspects which stand out as a major road blocks are these: -

a. More than 50% fire fighter id's are utilized to access tables [ only to view ] in a production system by execution of transaction code SE16D.
And users don't remember what tables were accessed. That being the case, no conclusive listing can be prepared for creation of customized transaction codes.
And there is no SAP provided transaction code [ which I am aware of ] which would list out tables viewed by execution of SE16D for a specific user id in between
a specific time range.

- Are there any other alternatives to find accessed tables by usage of SE16D ?
- What are the other methodologies which can be suggested to users to access tables without usage of SE16D by logging into fire fighter id's.
- What is the audit stand point on providing direct access to SE16D to dialog user id's.

b. Please share best practices \ ideas which was effective for you in reduction of fire fighter id assignments in production systems.

Thanks
Raj

[pau_torregrosa]

Hi Raj,

I believe that Security Audit Log (SM19/SM20) is what you are looking for. Check if it is activated in SM19, and if it is logging Transaction/Reports Starts. If that is the case, you can search in SM20 for those SE16 executions for your Firefighter IDs, the table accessed should be there. If Audit Log is not active, I don't see how you could get that information.

Regards,

-Pau