Answer / subal

Hi ,

this is Subal from Accenture.
ST01 is mainly used to trace user's authorization access.
When we can not make out [by use of SU53]what is missing
for a particular user that he can not access certain things.
We use ST01 to trace the user's action and thereby find out
missing authorizations.

Steps:St01
check authorization check
click on general filter and give user whose trace you want
click on Trace On
save the setting.
---------------------------
Now ask the user to perform the task he was doing --and
complained for missing access.
after his complation
----------------------
Come to st01 again
click on trace off [this is very important to turn it off]
click on analysis button -->give the from date&time and to
date&time accurately.
execute
you will get detailed description of users action with
missing auth [that come with rc >0]

------------------------
note those auth obj and field for which user had issue.
find role and assign the user to give needed access.
--------------------------------
I think this is detailed enough.....

Regards,
SUBAL

Answer / prakash

Hi,
I partially agree with Subal, need to follow below 2 points
before performing all the steps mentioned above by Subal.

- First we need to check in which application server user
has logged in.
- Using SM51 tcode, you need to login same application
server where user logs in.
- Then perform trace activity

What is purpose of using Pound Sign(#) and colon(;) in BI/BW security

3 Answers   IBM,

---

1 .what are the authorization switches in security

1 Answers   IBM,

---

how you can lock all the users at a time in sap?

1 Answers  

---

How many Single roles can be added in one Composite role ?

3 Answers   Patni,

---

How can assign miising authorizations in BI?

1 Answers   Philips,

---

a user is assigned with tcode SA38.how to restrict him to execute only a few reports,say rsusr003.

4 Answers   iGate,

---

does composit role has autherisations,how to we add the org values in composit role,What is the max authorizations objects that can be assigned to a profile

4 Answers   Tech Mahindra,

---

Which transaction should not be given to BASIS and DEV team in Production?

0 Answers   IBM,

---

How to find list of roles which are not assigned to any user

1 Answers   Wipro,

---

what is SOD?

3 Answers   IBM,

---

How would you do the 'a user logge into production system, changes a table and logged out'. How would you track him?

0 Answers  

---

Q6) When do you get a screen for " maintaining the authorization values for org elements " in PFCG ??? (i.e..screen you get thru PFCG --> AUTHORIZATION tab --> CHANGE AUTHORIZATION DATA --> SCREEN FOR MAINTAINING ORG ELEMENT VALUES )

3 Answers   HP,

---