Changes in user profile for F_BKPF_BES

[atif_farooq]

Dear All:

I am FI key user. I have a query its regarding Activity F_BKPF_BES user log history. Can i get information regarding a user for a specific date range that what changes un his profile were made during the selected period agianst F_BKPF_BES object. Is there any T code i Basis which gives above mentioned selection criteria. Please guide.

Regards

[arpan_paik]

Tcode is SUIM - change history - for users/role... as u r fi key user so I guess u might seek assistance from your security guys.

[atif_farooq]

Dear:

I want it to find it in specific date range. SUIM not showing date range for finding change log of a user against f_bkpf_bes.

Please guide

[Bernhard_SAP]

Hi,

so you know already the profile name, through which the user got f_bkpf_bes.

Then go to suim change logs->for authorizaitions.

Enter object f_bkpf_bes, Authorization= <Profilename>(use the wildcard '' after the profilename!

changes since/changes up to-->thats your interval which you want to analyze.

b.rgds, Bernhard

[Former Member]

Hi ,

There are 2 different casess possible

1) object might have changed in the roles assigned to the user .

You can see which role of the user the object is and then see the change document for the role in SUIM .

2) The object might have change in users profile by change in the role assignment

You need to see the change document for the user to see what all roles were assigne to user previously and weather those roles had this object .

It might also be possible that the combination of both the cases has happened .

Hope i have answered your question .

[Former Member]

That is because no change was made with respect to the object you mention during the time period you are inserting in change document/authorization.

[atif_farooq]

Dear:

I want this selction criteria and none has satisfactorily answered me this question. My slection criteria would be

User Name:Fi-02

Auth Object:f_bkpf_bes

Date range for change history:05.05.2009 to date.

What i will get from this will role for Gl authorization changed since then. Please guide me path to it if u have any it.

<removed_by_moderator>

Regards

Edited by: Julius Bussche on Aug 9, 2010 10:35 AM

[Henrik1]

The only way of doing this is to look at the change document for that period for all roles that was assigned to the user in that period. There is no one-stop-shop for this kind of information...

You can't find "user - auth" assignment, only "user - role - auth" if that makes sense.

[Former Member]

Hi,

Firstly you will not have access to security transaction. So approach security team.

if you have se16 transaction-> retreive user history from tables USH02,USH04,USH10 and USH12.

Thanks,

Sri

[atif_farooq]

Dear All:

Since i did not get satisfactory reply for the question i asked so i am closing this question as answered because i dont want an unresolved issue standing for long.

Regards

[Former Member]

What is wrong with the answers by the others? They are good leads in my opinion considering that I am sure there is nothing in standard which will give you an easy answer to this, also because you have not stated yet whether you want to know who could have changed the account group (authority) or who did change the account group (event) - which is the other side of the coin because the object is optional together with F_SKA1_BES.

The customizing and master data config dependencies in SAP which have an influence on authorizations required by the users are very diverse in SAP. I have only ever seen one audit program which attempted to take these into consideration.

Just for F_BKPF_BES and F_SKA1_BES and the accual account record settings you should be able to develop it yourself though without it becoming too complex.

Cheers,

Julius

Edited by: Julius Bussche on Aug 9, 2010 1:17 PM

[atif_farooq]

Dear:

Thankyou for guidance.

Regards

[Former Member]

Hi

Run the transaction SUIM then go to Roles option --> authorization Object --> give name F_BKPF_BES

then you got the list of roles and identify the related role with object F_BKPF_BES do the necessary changes

Thanks

Manish Gupta