Not Able To Find a Role For a specific Tode

[Former Member]

Hi Experts,

I am trying to search a tcode.I have used as many ways as i could.

1.Thru SUIM- Roles by transaction code.

2.Thru SUIM- Roles by authorization value.

3.Thru Table AGR_TCODES

4.System trace

5.Performed user comparision for all roles contain in my buffer.

Also, I have checked in SE97 to check wheather there is any indirectly calling transaction code against it, but recieved no success yet.

However ,my Colleague is able to perform that Txn.code without any authorization error.We both have exactly same roles.In my case, it is throughing missing authorization error.The Txn. code is /n/VIRSA/ZRTCNFG.

Kindly help me inresolving the issue.

Regards,

Mukesh

[former_member185031]

>

> Hi Experts,
> 
> I am trying to search a tcode.I have used as many ways as i could.
> 
> 1.Thru SUIM- Roles by transaction code.
> 2.Thru SUIM- Roles by authorization value.
> 3.Thru Table AGR_TCODES
> 4.System trace 
> 5.Performed user comparision for all roles contain in my buffer.
> 
> Also, I have checked in SE97 to check wheather there is any indirectly calling transaction code against it, but recieved no success yet.
> 
> However ,my Colleague is able to perform that Txn.code without any authorization error.We both have exactly same roles.In my case, it is throughing missing authorization error.The Txn. code is /n/VIRSA/ZRTCNFG.
> 
> Kindly help me inresolving the issue.
> 
> Regards,
> Mukesh

Check the roles assigned to your colleague is there S_TCODE = * anywhere, may be this could be a reason.

Regards,

Subhash

[Former Member]

HI Mukesh,

SInce u and ur friend have the same set of role assigned against ur user profile, could you please perform a PFUD for all the roles assigned to your user profile and then chk.

Thanks,

Saby..

[klaki]

Hi,

have a look in table TSTC!

You may find it there!

As far as I remember, you can't access those transactions in the usual way,

put it in your favorites and try it with a double-click.

Cheers

Klaus

[Former Member]

Go to suim

Role s

Roles by compels selection criteria

Role-enter *

Selection according to authorization values

In Object1 Enter

S_tcode

Transaction code

Enter T-Code(Which u want to find out)

And execute(it will display if u added ant t-code manually through S-Tcode.)

[Former Member]

Hi Mukesh,

Check for your friend from which role he is getting the Tcode access by giving the value in SUIM for searching roles by object level and also at transaction level and accordingly check your roles also. one more thing if you are also assigned to the same role of your friend's then do the 'User comparision' for the role and also check for the validity period of the role for your user-id.

Hope it will helps..

Cheers.....

[sdipanjan]

Hi,

This TCode is available if your system has the GRC CC5.2 RTA. If you cann't find out the TCode in normal way (as used to do in every cases, for e.g. SUIM -> Roles by TCode assignment), please go to TCode SE84, then "Other Objects" -> Transactions. Put TCode "/VIRSA/ZRTCNFG" in the Transaction code field and execute.

Now you can find out further to find out other related TCodes (VIRSA) corresponding to the same package (/VIRSA/RT).

1. Go to SE16 -> table TDEVC -> put the package name and get the list.

2. Go to SE80 -> put the package name (by selecting option "Package") and click on the Display button -> then expand the drop down "Transaction"

FYI: This TCode is used to configure GRC Risk Terminator

Now coming to the question, how to find out the role? The answer is very simple: You may not have the TCode /VIRSA/ZRTCNFG assigned to any role in menu (and listed in S_TCODE). Still the access to the TCode is granted due to "variable" or "range" entry in S_TCODE.

Hope the answer is clear. Else, please let me know.

Regards,

Dipanjan

[Former Member]

Hello Murli,

I have already checked both options thru SUIM , Thru object selction criteria, i am getting display all roles,as all roles contain * or V* -Z* value inside the object S_TCODE.No value is selected thru selection criteria role by transaction assignment.

Further,I have checked the role thru which my colleague is getting access.I already have access to that role.

Hello Dipanjan,

You are right,we are configuring RT and i know that T code exist(as my friend is able to access that).My Curiosity is to know, if that transaction exist in our SAP sytem (we have already configured GRC AE 5.3 RTA in backend) and if we ignore its location (Menu or under S_TCODE) why it is not displaying under any of the role present in our system.

Thanks for your views.

Mukesh

[Former Member]

Hi Mukesh,

As rightly pointed out by Dipanjan you might be getting access to the particular txn i.e /VIRSA/ZRTCNFG due to the presence of an all authorization like " * " present in the TCD field of the auth. object S_TCODE in a particular role and hence while u r performing the search using the auth. object S_TCODE in SUIM this is not being evident.

Please enter #* while you perform the search in SUIM i.e in the Transaction Code field of the auth. object S_TCODE.This will display all the roles in your system where the value * has been used for transaction code.This will give u an idea thru which role the u r getting the access.

Thanks,

Saby..

[Former Member]

Or you may use AGR_USERS to get the list of roles assigned to you (or your friend) and then AGR_1251 and search for Object : S_TCODE , Field : TCCD , Value = * (Press F2 in value text box)

Cheers !!

Zaheer

[Former Member]

> The Txn. code is /n/VIRSA/ZRTCNFG.

So you entering this directly in the ok-code field, and that is where the difference between you and your colleague appears?

What is the message number (double-click the status bar at the bottom) which it returns for you? Is it stating that you are not authorized to use transaction /n/VIRSA/ZRTCNFG or not authorized to start it?

Some transactions protect themselves regardless of the caller and their calling transaction context, or which function codes call/submit their programs of various types.

As a little "hack", try start another /VIRSA/* or z* transaction and then enter /n/VIRSA/ZRTCNFG" and hit Enter. Is the message different now? Hit Enter again?

Anyway, I will move this question to the GRC forum (the gurus on using this are there) and no doubt have a better undestanding of what is required to use this transaction, as in my opinions searching for * value for S_TCODE will not help and shouldn't...

Cheers,

Julius