How to create authorization group and it's purpose

[kjyothiraditya]

Hi experts,

How to create authorization group and what is its purpose ?

Best way to assign authorization to a tcode ?

Regards,

Aditya

[FredericGirod]

Authorization group

--> trans SE56 menu Environment/ Authorization / Authorization group

--> Authorization to tcode

transaction should always been checked with S_TCODE object. But in some company specific program check also if you have access to S_TCODE of the transaction. To be sure you do not run the program directly

[Sandra_Rossi]

What means "Authorization to tcode"? (in fact, I guess the OP asked about the relationship between an authorization group and a transaction code, but they are not directly related -- or maybe that was just 2 unrelated questions).

[kjyothiraditya]

Hi Frederic,

This is for tmg. How can we create Auth group for program ? And how does it work in program scenario ?

[Sandra_Rossi]

What "authorization group" do you mean? Of programs? Of table/view maintenance? Of something else?

Or do you mean "authorization class"?

What do you mean "assign authorization to a tcode"? Authorization object? What is your requirement?

[kjyothiraditya]

Yes, Auth group can be assigned to tmg. But I am talking in general and how to assign it to a custom tcode.

[Sandra_Rossi]

Sorry but authorization groups of programs and table/view maintenance are different, so it's important to mention that it's for tmg.

So, your question is about authorization group of table/view maintenance, the group pertains to the authorization object S_TABU_DIS. The authorizations are checked when you access the table/view via SM30, and even tables with SE16 (and probably a few other standard tools). If not authorized, SAP controls S_TABU_NAM (by table name).

You can't "assign an authorization group to a transaction code" (this sentence is non-sense in SAP). Or maybe you're talking about assigning an authorization object to the transaction code?

[kjyothiraditya]

Ok, thanks for clarifying. How to create authorization group for program ?

[kjyothiraditya]

This is for tmg. How can we create Auth group for program ? And how does it work in program scenario ?

[kjyothiraditya]

This is for tmg. How can we create Auth group for program ? And how does it work in program scenario ?

[Sandra_Rossi]

Now the question is more precise and you have lots of answers in the forum, in the SAP library and in the ABAP documentation (SUBMIT) - around S_PROGRAM authorization object. Search:

How can we create Authorization group for program site:sap.com