SAP Authorizations Check and refresh the permission buffer

Direkt zum Seiteninhalt
Check and refresh the permission buffer
WHY ACCESS CONTROL
Certain permissions that are not relevant until a job step is run are checked at the time of scheduling for the specified step user. This checks whether the selected user is authorised to run the specified ABAP programme or external command. For programmes associated with a permission group, the S_PROGRAM object is checked. External commands test for the object S_LOG_COM.

An alternative to using the S_TABU_LIN authorization object is to create custom table views that make organisational delimitation easier to achieve. To do this, create a new view in the SE11 transaction and add the table to which the constraint will apply on the Tables/Join Conditions tab. The Selection Conditions tab allows you to specify your restrictive organisational condition in the form of a field and a field value. You then authorise all relevant users to access the view, which contains only data for your organisational restriction.
Security Automation for HR Authorizations
The requirements for the architecture of authorization concepts are as individual as the requirements of each company. Therefore, there is no perfect template. Nevertheless, there are topics that should be considered in an authorization concept.

Here, the authorizations are either derived from the role menu (through the authorization default values (transaction SU24) or can also be edited manually in expert mode. The individual authorization objects are divided into object classes. For example, the object class AAAB (cross-application authorization objects) contains the authorization object S_TCODE (transaction code check at transaction start) with the authorization field value TCD (transaction code).

Authorizations can also be assigned via "Shortcut for SAP systems".

At www.sap-corner.de you will also find a lot of useful information on the subject of SAP authorizations.

Maybe you create a small docu for all your users how to display the error and where to send it, so a "Cooking Recipe: How To...".

What sounds simple requires a few steps to be learned.
SAP Corner
Zurück zum Seiteninhalt