R/3 Security Tcodes

End User

Transaction Code

Menu Path

Purpose

SU3

System --> User Profile--> Own Data

Set address/defaults/parameters

SU53

System --> Utilities ­--> Display Authorization Check

Display last authority check that failed

SU56

Tools --> Administration --> Monitor --> User Buffer

Display user buffer

Role Administration

Transaction Code

Menu Path

Purpose

PFCG

Tools --> Administration --> User Maintenance --> Roles

Maintain roles using the Profile Generator

PFUD

Compare user master in dialog.
This function can also be called in the Profile Generator: Environment --> Mass compare
The Job for user master comparison is: PFCG_TIME_DEPENDENCY (to Release 4.0 RHAUTUP1)

SUPC

Tools --> Administration --> User Maintenance --> Roles --> Environment --> Mass Generation

Mass Generation of Profiles

User Administration

Transaction Code

Menu Path

Purpose

SU01

Tools --> Administration --> User Maintenance --> Users

Maintain Users

SU01D

Tools --> Administration --> User Maintenance --> Display Users

Display Users

SU10

Tools --> Administration --> User Maintenance --> User Mass Maintenance

User mass maintenance

SU02

Tools --> Administration --> User Maintenance --> Manual Maintenance --> Edit Profiles Manually

Manually create profiles

SU03

Tools --> Administration --> User Maintenance --> Manual Maintenance --> Edit Authorizations Manually

Manually create authorizations

Profile Generator Configuration

Transaction Code

Menu Path

Purpose

RZ10

Tools --> CCMS --> Configuration --> Profile Maintenance

Maintain system profile parameters.
(auth/no_check_in_some_cases = Y).

SU25

IMG Activity:
Enterprise IMG --> Basis Components --> System Administration --> Users and Authorizations --> Maintain authorizations and profiles using Profile Generator --> Work on SAP check indicators and field values
Select: Copy SAP check ID’s and field values

Installation
1. Initial Customer Tables Fill
Upgrade
2a. Preparation: Compare with SAP values
2b. Reconcile affected transactions
2c. Roles to be checked
2d. Display changed transaction codes

SU24

Same as for SU25:
Select: Change Check Indicators

  • Maintain Check Indicators
  • Maintain Templates

Transport

Transaction Code

Menu Path

Purpose

SCCL

Tools --> Administration --> Administration --> Client Administration --> Client Copy --> Local Copy

Local client copy (within one system, between different clients)

SCC9

Tools --> Administration --> Administration --> Client Administration --> Client Copy --> Remote Copy

Remote Client Copy (between clients in different systems) Data exchange over a network (not files).

SCC8

Tools --> Administration --> Administration --> Client Administration --> Client Transport --> Client Export

Client transport (between clients in different systems) Data exchange using a data export at operating system level.

Tools --> Administration --> User Maintenance --> Roles --> Environment --> Mass Transport

Mass transport of roles

Tools --> Administration --> User Maintenance --> Roles --> Role --> Upload/Download

Upload/Download of Roles

SU25

Point 3.

Transport of Check indicators

STMS

Tools -->Administration --> Transports --> Transport Management System

Transport Management System

System configuration

Transaction Code

Menu Path

Purpose

RZ10

Tools --> CCMS --> Configuration --> Profile Maintenance

Maintain system profile parameters.
(auth/no_check_in_some_cases = Y). .

RZ11

Description of system profile parameters

SM01

Tools --> Administration --> Administration --> Transaction Code Administration

Lock transaction codes from execution

Authorization Object

Transaction Code

Menu Path

Purpose

SU20

Tools --> ABAP Workbench --> Development --> Other Tools --> Authorization Objects --> Fields

List of authorization fields

SU21

Tools --> ABAP Workbench --> Development --> Other Tools --> Authorization Objects --> Objects

List of authorization objects (Initial screen lists by object class)

Audit

Transaction Code

Menu Path

Purpose

SE84

Tools --> Administration --> User Maintenance --> Information System

Information System for SAP R/3 Authorizations

SECR*

Audit Information System


Table maintenance

Transaction Code

Menu Path

Purpose

SM30
(Tables
V_BRG,
V_DDAT)

System --> Services --> Table Maintenance --> Extended Table Maintenance

Create table authorization groups (V_BRG)
Maintain assignments to tables (V_DDAT)

Table Group

Transaction Code

Menu Path

Purpose

SE43

ABAP Workbench --> Development --> Other Tools --> Area Menus

Maintain (Display) Area Menus

No comments:

topics