Skip to Content
avatar image
Former Member

Can not find role for some transection code

Dear Gurus,

EWA alert with security issue.

Many user grant access some t-code etc. SE16,SM59,SE17,SE16 and I found users at SUIM t-code can access.

But , when I find role for t-code that I should remove.

Not found,

Please advise.

Thank .

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Best Answer
    avatar image
    Former Member
    Jul 28, 2009 at 08:26 AM
    Many user grant access some t-code etc. SE16,SM59,SE17,SE16 and I found users at SUIM t-code can access. 
    
    But , when I find role for t-code that I should remove.

    Check what profiles are attached to these users via SU01. May be SAP_ALL or SAP_NEW is attached.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 28, 2009 at 08:26 AM

    Dear Witoon Dachapitak,

    Can you tell us how yu are searching for roles of t-codes. As you alreay said that you have got the user ids from SUIM then go to SU01 and give that particular user name and check under roles tab. Under roles tab open the role and check for the Tcodes

    Also using SUIM you can find the same easily.....by using Roles by Complex selection crieteria

    Regards,

    Sharath

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi, Babu

      I use Role by Transection Assignment,

      And I saw more then 100 roles assign for user at SU01.

  • avatar image
    Former Member
    Jul 28, 2009 at 08:59 AM

    Hi,

    can you please try this

    SUIM > Roles by complex criteria or RSUSR070 to find out this.

    Go to the Selection by Authorization Value.

    In Object 1 put S_TCODE and hit enter.

    And put SU01 in Transaction code and hit execute (clock with check) button.

    I use authorization object, as you can use this to test any object.

    You can also get this information directly from table, if you have access to SE16 or SE16N. Execute SE16N

    Table AGR_1251

    Object S_TCODE

    VALUE (low) SU01

    Regards,

    Srinu

    Add comment
    10|10000 characters needed characters exceeded