Comparing Users, Authorizations, Roles, and Profiles Cross-System

Use the RSUSR050 report to compare two user master records, roles (including composite roles), profiles, or authorizations in the same system or different systems.

Prerequisites

To compare entities across systems, you must have defined RFC destinations. To RFC destinations, use Configuration of RFC Connections (transaction SM59).

Context

We deliver the RSUSR050 report with different variants to compare the different types of entities. The following table lists the variants we deliver and the menu path in the user information system to open them directly.

Predefined Variants
Variant	Menu Path
SAP&_BENUTZER	Comparisons From Users
SAP&_ROLLE	Comparisons From Roles
SAP&_PROFILE	Comparisons From Profiles
SAP&_BERECHTIG	Comparisons From Authorizations

When comparing composite roles, you receive as the result a list of the single roles and then below the roles, a comparison of the authorization objects.

For more information about the selection options, see the Performance Assistant ( SHIFT + F1 ) for this report.

This example describes how you can compare two users. The procedure is the same for roles, profiles, or authorizations.

To compare user master records for the same user in a central user administration landscape, use the RSUSR_SYSINFO_ZBV report available at Start of the navigation path User Next navigation step Cross-System Information (Central User Administration) Users by System End of the navigation path .

Procedure

Start the report in the User Information System (transaction SUIM) by choosing Comparisons.
Choose  Of Users.
In the User A and User B fields, enter the names of the users to compare.
Choose Across Systems.
- To compare a user of the current system with a user from another system, enter the user name for user A and the RFC destination and the user name for user B. You can use the input help to select from the available RFC destinations.
- To compare a user from another system A with a user from a further system B, enter the RFC destinations of these systems in the RFC Destination for System A and RFC Destination for System B fields.
Choose Execute.
The system displays the Comparisons screen, on which a comparison of the two users is displayed. This result is divided into same values, different objects, same values, and different values. For different objects, only the user for which an authorization object is displayed has the object. Different values mean that although both users have authorizations for the same object, the values are different. Same values mean that both the authorization object and the authorization values of the two users match.
- To display documentation for an authorization object, select the object and choose Documentation.
- To display a sorted comparison of the values by authorization fields, select the relevant line and choose Select.

Results

The authorizations from different profiles were resolved, combined by objects, and sorted by fields. The result is a compact comparison of the values for each field.

For information about investigating the user master records of two users for an object at the authorization level, see the Users by Complex Selection Criteria (RSUSR002 ) report.