Early Watch Report "Users Authorized to Change or Display all Tables"

[former_member204618]

Hi All,

I'm coming back to this again after a number of years. This is because I still cannot get the same number of users that are being reported by the EW report using SUIM or via the tables directly.

Anyone know of a definitive way of getting this list?

Also is the list of objects checked :-

Authorization objects:
Object 1: S_TCODE with TCD=SE16, TCD=SE16N, TCD=SE17, TCD=SM30, or TCD=SM31Object 2: S_TABU_DIS with ACTVT = 03 or 02 and DICBERCLS = *

an AND or an OR?

Does it take into account invalid and locked users? No matter how I do this I also seem to find more users than is being reported.

I have reported 1 user having SAP_ALL in client 000 but all users in client 000 with SAP_ALL are locked.

Same issue with "Users Authorized to Display Other Users Spool Request"

Authorization objects:
Object 1: S_TCODE with TCD = SP01 or SP01OObject 2: S_ADMI_FCD with S_ADMI_FCD = SP01 or SP0RObject 3: S_SPO_ACT with SPOACTION = BASE and DISP and SPOAUTH = * or __USER__

Any help much appreciated as it's driving me nuts and I would like to get my EWA green and this section is preventing that.

Cheers
Craig