I need to recreate the SUIM query of Users w/specific authorization objects in a recurring program. Can somebody help me see where I'm off? I follow the below logic. Often, my query returns way more users than the SAP's SUIM query.
First, I make sure I have the child roles included using the AGR_AGRS table.
Then, I query AGR_1251 table for the auth object I am looking for.
Next, I join the results of AGR_1251 with the results of the 1st query to find all of the roles w/the auth object.
Last, I join these results with the AGR_USERS table on the role name (AGR_NAME). This brings all the users assigned roles with the auth object.
Boy, I could really use help on this. Thanks!