Skip to Content
avatar image
Former Member

For each user, How do I extract from SAP, all the Composite and Single Role assigned?

I will soon be performing a user attestation/recertification for all SAP systems however I don't believe we have any of the GRC tooling in place at the moment. I need to extract all users Composite roles and Single Role provisions so that they can be reviewed.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Best Answer
    Sep 22, 2017 at 12:46 PM

    Hi Tom,

    agr_users will show you that. If field COL_FLAG is empty, it's a direct assignment. In case it comes through a composite role, the field will be X.
    Cheers, Alessandro

    Add comment
    10|10000 characters needed characters exceeded

  • Sep 22, 2017 at 09:22 AM

    Hi,

    you can use the transaction SE16

    roles to user -> AGR_USERS

    roles to profile -> AGR_PROF

    Also for profile -> User you can try to use UST04

    Best Regards

    Thorsten

    Add comment
    10|10000 characters needed characters exceeded

  • Oct 11, 2017 at 03:45 PM

    Hi Tom,

    Please play around with AGR* tables,

    • AGR_Users will give Users with assigned roles
    • AGR_AGRS will give all Composite Roles
    • AGR_Tcodes will give role with Tcodes
    • AGR_Define will give Child role with Parent role relationship
    Add comment
    10|10000 characters needed characters exceeded