Skip to Content
0
Former Member
Mar 02, 2009 at 09:49 AM

Object level checking for some of the basis tcodes(internal audit)

617 Views

Hi masters,

in our company every month we check access controls for some of basis tcodes,i am giving it below,is the selection for Tcode and object level values combinations are correct or is there any modifications please notify.

Tcodes Imp Auth Objects Auth fields Auth values

SCC1 S_CLNT_IMP Actvt 21,60

S_TABU_CLI CLIIDMAINT X

SCC4 S_TABU_CLI CLIIDMAINT X

S_TABU_DIS Authorization Group *

Actvt 01,02

SCC5 S_CLNT_IMP Actvt 21,60

S_TABU_CLI CLIIDMAINT X

SCC7 S_TRANSPRT Request type *

Actvt 43,60,75

S_CLNT_IMP Actvt 21,60

SCC8 S_DATASET PROGRAM *

Actvt 06,34,A7

S_TRANSPRT Request type *

Actvt 43,60,75

SCC9 S_TABU_CLI CLIIDMAINT X

S_CLNT_IMP Actvt 21,60

SCCL S_TABU_CLI CLIIDMAINT X

S_CLNT_IMP Actvt 21,60

SCU0 S_TABU_DIS Authorization Group SS

Actvt 01,02

S_TABU_RFC Actvt 3

OBR1

SM01 S_ADMI_FCD TLCK

SM04 S_ADMI_FCD PADM

SM12 S_ENQUE S_ENQ_ACT DPFU,DLOU

SM13 S_ADMI_FCD UADM,UMON

SM50 S_ADMI_FCD PADM

SM54 S_ADMI_FCD NADM

SM55 S_ADMI_FCD NADM

SM56

SM59 S_ADMI_FCD NADM

RFCA

SMLT S_LANG_ADM Actvt 02,16,61

Table *

SPAD S_SPO_DEV SPODEVICE *

SP01 S_SPO_DEV SPODEVICE *

S_ADMI_FCD SP01,SP0R

ST01 S_ADMI_FCD ST0M,ST0R

ST05 S_ADMI_FCD ST0M,ST0R

RZ04 S_RZL_ADM Actvt 1

RZ06 S_RZL_ADM Actvt 1

RZ10 S_RZL_ADM Actvt 1

RZ21 S_RZL_ADM Actvt 1

S_BTCH_JOB JOBGROUP *

JOBACTION DELE,RELE

SM49 S_LOG_COM Command *

Opsystem *

Host *

S_RZL_ADM Actvt 1

SM69 S_RZL_ADM Actvt 1

SM63 S_RZL_ADM Actvt 1

SMLG S_RZL_ADM Actvt 1

SE16 S_TABU_DIS Authorization Group *

Actvt 01,02

SM30 S_TABU_DIS Authorization Group *

Actvt 01,02

SM31 S_TABU_DIS Authorization Group *

Actvt 01,02

SPRO S_PROJECT PROJECT_ID *

APPL_COMP *

PROJ_CONF *

Actvt 02,06

S_DOKU_AUT DOKU_ACT MAINTAIN

DOKU_DEVCL *

DOKU_MODE *

SPRO_ADMIN S_PROJECTS APPL_COMP *

PRCLASS *

Actvt 01,70

S_PROJECT PROJECT_ID *

APPL_COMP *

PROJ_CONF *

Actvt 02,06

PFCG S_USER_AGR ACT_GROUP *

Actvt 01,02

S_USER_PRO Actvt 01,02

PROFILE *

SM19 S_ADMI_FCD AUDA,AUDD

SU01 S_USER_AGR *

01,02

S_USER_GRP Class *

Actvt 01,02

SU02 S_USER_PRO Profile *

Actvt 01,02

SU03 S_USER_AUT OBJECT *

AUTH *

Actvt 01,02

S_USER_PRO Profile *

Actvt 01,02

SU05

SU10 S_USER_GRP Class *

Actvt 01,02

SU12 S_USER_GRP Class *

Actvt 01,02

SU20 S_DEVELOP DevClass *

ObjectType SUSO

ObjectName *

P_Group *

Actvt 01,02

SU21 S_DEVELOP DevClass *

ObjectType SUSO

ObjectName *

P_Group *

Actvt 01,02

SU22 S_DEVELOP DevClass *

ObjectType SUST

ObjectName *

P_Group *

Actvt 01,02

CMOD S_DEVELOP DevClass *

ObjectType CMOD

ObjectName *

P_Group *

Actvt 01,02

SA38 S_PROGRAM P_Action SUBMIT,BTCSUBMIT

P_Group *

SD11 S_DEVELOP DevClass T,Y,Z*

ObjectType UDMO,UENO

ObjectName *

P_Group *

Actvt 01,02

SE11 S_DEVELOP DevClass T,Y,Z*

ObjectType DOMA,DTEL.ENQU

ObjectName *

P_Group *

Actvt 01,02

SE12 S_DEVELOP DevClass T,Y,Z*

ObjectType DOMA,DTEL.ENQU

ObjectName *

P_Group *

Actvt 01,02

SE13

SE14 S_DEVELOP DevClass T,Y,Z*

ObjectType INDX.MCID,TABL

ObjectName *

P_Group *

Actvt 01,02

SE15 S_DEVELOP DevClass *

ObjectType *

ObjectName *

P_Group *

Actvt 3

SE37

SE38 S_DEVELOP DevClass T,Y,Z*

ObjectType FUGR,PROG

ObjectName *

P_Group *

Actvt 01,02

SE93 S_DEVELOP DevClass T,Y,Z*

ObjectType TRAN

ObjectName *

P_Group *

Actvt 01,02

SE41 S_DEVELOP DevClass *

ObjectType *

ObjectName *

P_Group *

Actvt 01,02

SE43 S_DEVELOP DevClass *

ObjectType *

ObjectName *

P_Group *

Actvt 3

SE43N S_DEVELOP DevClass '

ObjectType '

ObjectName '

P_Group '

Actvt 01,02

SE51 S_DEVELOP DevClass T,Y,Z*

ObjectType FUGR,PROG,DYNP

ObjectName *

P_Group *

Actvt 01,02

SE80 S_DEVELOP DevClass T,Y,Z*

ObjectType *

ObjectName *

P_Group *

Actvt 01,02

SE81 S_DEVELOP DevClass *

ObjectType *

ObjectName *

P_Group *

Actvt 01,02

SE82 S_DEVELOP DevClass Y,Z

ObjectType APPLTREE

ObjectName *

P_Group *

Actvt 01,02

SE91

SE92

SE92N

SNRO S_NUMBER NROBJ *

Actvt 02,17,11

SQ00 S_QUERY Actvt 02,23

SQ01 S_QUERY Actvt 02,23

SQ02 S_QUERY Actvt 02,23

SQ03 S_QUERY Actvt 23

SQVI

SM35 S_BDC_MONI BDCAKTI ABTC,AONL,DELE

SM35P S_BDC_MONI BDCAKTI ANAL

SM36 S_BTCH_ADM BTCADMIN Y

SM37 S_BTCH_JOB Jobaction PROT,SHOW

Jobgroup *

SM39

SM62

SM64 S_BTCH_ADM BTCADMIN Y

SE01 S_CTS_ADMI CTS_ADMFCT EPS1,EPS2,PROJ

S_TRANSPRT Actvt *

Ttype *

SE06 S_C_FUNCT PROGRAM SAPLSTRF,SAPLSTRI

CFUNCNAME SYSTEM

ACTVT 16

S_TRANSPRT Actvt 43,60,65

Ttype *

SE09 S_TRANSPRT Actvt 43,60,65

Ttype *

S_CTS_ADMI CTS_ADMFCT EPS1,EPS2,PROJ

SE10 S_TRANSPRT Actvt 43,60,65

Ttype *

S_CTS_ADMI CTS_ADMFCT *

SPAM S_CTS_ADMI CTS_ADMFCT IMPA,IMPS

S_TRANSPRT Actvt 43,60,65

Ttype PATC,PIEC

STMS S_CTS_ADMI CTS_ADMFCT *

S_RFC Actvt 16

RFC_NAME EPSF,STPA

RFC_TYPE FUGR

Edited by: rameshbabu muddana on Mar 2, 2009 10:56 AM