Answer / subal

Hi ,

this is Subal from Accenture.
ST01 is mainly used to trace user's authorization access.
When we can not make out [by use of SU53]what is missing
for a particular user that he can not access certain things.
We use ST01 to trace the user's action and thereby find out
missing authorizations.

Steps:St01
check authorization check
click on general filter and give user whose trace you want
click on Trace On
save the setting.
---------------------------
Now ask the user to perform the task he was doing --and
complained for missing access.
after his complation
----------------------
Come to st01 again
click on trace off [this is very important to turn it off]
click on analysis button -->give the from date&time and to
date&time accurately.
execute
you will get detailed description of users action with
missing auth [that come with rc >0]

------------------------
note those auth obj and field for which user had issue.
find role and assign the user to give needed access.
--------------------------------
I think this is detailed enough.....

Regards,
SUBAL

Answer / prakash

Hi,
I partially agree with Subal, need to follow below 2 points
before performing all the steps mentioned above by Subal.

- First we need to check in which application server user
has logged in.
- Using SM51 tcode, you need to login same application
server where user logs in.
- Then perform trace activity

what Troubleshooting we get these transactions like SU53, ST01, SUIM and ST22

2 Answers   IBM,

---

What is the use of RSECADMIN ?

1 Answers  

---

what is centralized n decentralized

3 Answers   IBM,

---

How to run secatt in foreground?

1 Answers  

---

1.why we use derived role in sap security?2.what is the technical difference between master and derived role?

1 Answers   KPMG,

---

How to find list of roles which are not assigned to any user

1 Answers   Wipro,

---

By which parameter number of entries are controlled in the user buffer?

0 Answers  

---

In which table you can see authorization group for table and which table to see authorization group for program?

8 Answers   Cap Gemini,

---

How to do SAP R/3 Security configuration, design, development, testing, implementation and production support.

0 Answers   IBM,

---

What is the maximum number of authorization in an object?

1 Answers  

---

why we are assigining only 312 profiles to the user

1 Answers   CTC, SAP Labs,

---

Mention which t-codes are used to see the summary of the authorization object and profile details?

1 Answers  

---