Thursday, 11 August 2016

Missing Authorization Object Adding - SAP Security


If any function in a T-code or any function in a specific transaction code can’t get by the user, we can add the authorization by adding authorization object and resolve that problem.

Fist we check what is the problem face by the user,

So Goto Transaction SU53
To disply authorization data for the user,

                                         

There is an option “display for different user (F5)” show in the above image

Click on that option, type user how face the problem
Click on execute

                                         
It shows the Missing Authorization Object and its Value, we will add the authorization value to the authorization object

                                        


To Find which "Role" contain the missing authorization object, Goto SUIM

Role -----> Role by Complex  Selection Criteria 


In the opened Screen Fill the marked Columns in the bellow image,

User Name (Problem facing User Name), Transaction Code (Problem facing Transaction code), Object 1 (Missing authorization Object From SU53) 
It shows the "Role" which has missing the "Authorization Object"




Next, Goto PFCG
To find the role & add the missing object
                                         

Type the role name and click on edit option
Goto to 'Authorization'  tab

                                        


Click on “Change Authorization Data” option,

                                        

Click on ctrl+f , to find the object                                                                                                             
                                        

It shows the missing authorization object

                                        
Click on the pencil to add authorization value
Add the value on get from “SU53” on the opened field then Click on 'Generate' button,


                                       
Completed, Now you can use the previous missing function successfully......

No comments:

Post a Comment