Determining Roles, Profiles, Authorizations, and Authorization Objects 

Use

These reports RSUSR070 (roles), RSUSR020 (profiles), RSUSR030 (authorizations), and RSUSR040 (authorization objects) are constructed in the same way: The first node by complex selection criteria represents a combination of the nodes below in each case. The evaluation for the Roles node is presented as an example. In this way, you can, for example, find all roles that contain the authorization post document (F_BKPF_BUK, activity 01).

Procedure

...

       1.      Start the user information system (transaction SUIM).

       2.      Expand the Roles node.

       3.      Choose the Execute option next to Roles by complex selection criteria.

       4.      Under Selection by authorization values, enter F_BKPF_BUK in the Object1 field, and choose Input Values (you cannot enter any values for report RSUSR040).

The fields previously hidden for entering the values are now ready for input.

       5.      Enter the activity 1 as the value.

The result list appears.

       6.      There are additional functions available to you on the result list, depending on the search area:

Detail: Starts transaction PFCG: displaying the role

User assignment

Profile assignment

Transaction assignment

Value Input

The input values for the Value field of the authorization object are interpreted as follows:

Value	Explanation
no input	The system displays all authorization objects, irrespective of the value entered in the field.
’ ’	The system displays all authorization objects whose field contains a space as the value.
A*	The system displays all authorizations values whose field value begins with “A”.
*	The system displays all authorization objects whose field contains the placeholder asterisk as the value.
’*’	The system displays all authorization objects whose field contains the placeholder asterisk as the value.
VALUE	The system displays all authorization objects whose field contains “VALUE” as the value.