How to find the profiles...

Question: Gurus,

I want to find out the list of profiles in the system which is having a specific tcode. We can find it thru SUIM but only one tcode at a time. Is there any table we can use to get the list for one or more tcodes . The output should give both tcodes & profile.

Thanks in advance.

Answer:
for roles you should download AGR_1251 and restrict on S_TCODE object.
if you still work with profiles (you should not!!) also download AGR_Prof and find the profiles names linked to the roles in there.
Additional remark about AGR_1251 also the inactive values are visible so select the right values in the field modified

Answer:
try USTSTCAP, very helpful

Answer:
Dear auke_visser, thanks for your prompt reply. using Agr_1251 will give me only the roles having the tcodes list. But i want to find the list of profiles having that tcodes list. This is b'coz some users have got the tcode access thru profiles.. for e.g., some users have got SAP_ALL profile etc. My ultimate search is to find the list of users who have access to specific tcodes. The output should list tcodes with the corresponding user-ids. I didnt see a standard report existing for this. So, i'm trying to create a query thru SQ01 for which i need to list down the profiles having the tcodes. If i get this, then i could get the users list thru that query.

For e.g, if i search for a tcode '8AS5', it should show me the profiles having this tcode including the profiles which has got '*' value on the S_tcode object in it and also the profiles with value range '1* - 9*' in that object.

Dear nandanvk, thanks for your reply. I went into that table but that does not solved my purpose. pls read my descriptive post with this and then help me with that.

Answer:
Hi,

I think I found a solution for your requests. You need two tables: AGR_1016 (=profiles to a role) and AGR_TCODES (TX per role).

You can use the quick viewer to join them. I have just tried, it is is working well.

Ok, you will not get get profiles without a role (like sap_all), but you should not use sap_all. And someone said it here, it is better to use roles, which will include profiles.

Bye

Answer:
You need to look at a couple of tables to get this information on profile level: UST12 for authorisations and values and UST10S for assignment of the authorisations to profiles.

1 comment:

Unknown said...

Hi,

If the project permits, then you can maintain the critical authorisation & go for suim-> User Information System-> User-> With Critical Authorisations.

topics