How to find out in which role an authority object is included

[Former Member]

Hi,

I need to call web services by an external application. Therefore the authorization object S_SERVICE is needed to call services.

Now I want to add this object to a specific sap user, but how can I find out in which role this object is included? I don't want to create a new role for just only this standard SAP authority object.

Thank you!

[g_srivastava]

Hi Torben,

Please check the table ( AGR_1250 Authorization data for the activity group ).it contains the relation between role and authorization object.hope your query resolves soon.Have a best day ahead.

[Former Member]

Hey!

Thank you for your answer. I have now found roles, which include this object. But I still have the authorization problems and can see that the object S_SERVICE is the problem, when tracing with ST01.

I'm not that much into authorization stuff. So do I need also a profile? I only could call the web services by using profile SAP_ALL.

thank you!

[g_srivastava]

Hi Torben,

please check the User master Authrization Profiles table USR10.In addition to it I am sending you the link for Web service security.Please have a look I am sure you will get all the solution for the related query.

Link:[Security|http://help.sap.com/saphelp_webas630/helpdata/en/a2/4d79c96d52634ba479fa640b2f5bb4/content.htm]

Have a best day ahead.

[Pawan_Kesari]

>

> Hey!
> 
> Thank you for your answer. I have now found roles, which include this object. But I still have the authorization problems and can see that the object S_SERVICE is the problem, when tracing with ST01.
> 
> I'm not that much into authorization stuff. So do I need also a profile? I only could call the web services by using profile SAP_ALL.
> 
> thank you!

Now that you have required role with you .. simple assign that role to user id from transaction SU01 (Roles tabs).

Sap standard roles will already have profile in it. You might have to generate the profile. Goto transaction PFCG enter role name hit display button , goto Authorisation tab, hit Display Authorisation button and on next screen press generate button (Shift+f5).

By the way you can use SUIM to find role and profile for given authority object

[Former Member]

FM Module is in SAP CV120_START_APPLICATION

BY

IMUTHU.

[Former Member]

S_SERVICE is an "entry point" object, like S_TCODE and S_RFC etc are. So they are ideally Menu Objects.

If your user is missing this authority (some checks for which are new) then your role build concept is missing.

That the user does not have the authorization problem is only one side of the coin. The other is that they need to find it (in the menu).

See the docs in transaction Su21 about the object. Also execute the service once to populate the "hash" field once for the input help (perhaps you missed this step).

Cheers,

Julius