Friday 15 March 2013

R/3 Security Tcodes



End User
 
Transaction Code
Menu Path
Purpose
SU3
System --> User Profile--> Own Data
Set address/defaults/parameters
SU53
System --> Utilities ­--> Display Authorization Check
Display last authority check that failed
SU56
Tools --> Administration --> Monitor --> User Buffer
Display user buffer

Role Administration 

Transaction Code
Menu Path
Purpose
PFCG
Tools --> Administration --> User Maintenance --> Roles
Maintain roles using the Profile Generator
PFUD
<none>
Compare user master in dialog.
This function can also be called in the Profile Generator:   Environment --> Mass compare
The Job for user master comparison is: PFCG_TIME_DEPENDENCY (to Release 4.0 RHAUTUP1)
SUPC
Tools --> Administration --> User Maintenance --> Roles --> Environment --> Mass Generation
Mass Generation of Profiles

User Administration 

Transaction Code
Menu Path
Purpose
SU01
Tools --> Administration --> User Maintenance --> Users
Maintain Users
SU01D
Tools --> Administration --> User Maintenance --> Display Users
Display Users
SU10
Tools --> Administration --> User Maintenance --> User Mass Maintenance
User mass maintenance
SU02
Tools --> Administration --> User Maintenance --> Manual Maintenance --> Edit Profiles Manually
Manually create profiles
SU03
Tools --> Administration --> User Maintenance --> Manual Maintenance --> Edit Authorizations Manually
Manually create authorizations

Profile Generator Configuration
 
Transaction Code
Menu Path
Purpose
RZ10
Tools --> CCMS --> Configuration --> Profile Maintenance
Maintain system profile parameters.
(auth/no_check_in_some_cases = Y).
SU25
IMG Activity:
Enterprise IMG --> Basis Components --> System Administration --> Users and Authorizations --> Maintain authorizations and profiles using  Profile Generator --> Work on SAP check indicators and field values
Select: Copy SAP check ID’s and field values
Installation
1. Initial Customer Tables Fill
Upgrade
2a. Preparation: Compare with SAP values
2b. Reconcile affected transactions
2c. Roles to be checked
2d. Display changed transaction codes
SU24
Same as for SU25:
Select: Change Check Indicators
  • Maintain Check Indicators
  • Maintain Templates

Transport

Transaction Code
Menu Path
Purpose
SCCL
Tools --> Administration --> Administration --> Client Administration --> Client Copy --> Local Copy
Local client copy (within one system, between different clients)
SCC9
Tools --> Administration --> Administration --> Client Administration --> Client Copy --> Remote  Copy
Remote Client Copy (between clients in different systems) Data exchange over a network (not files).
SCC8
Tools --> Administration --> Administration --> Client Administration --> Client Transport --> Client Export
Client transport (between clients in different systems) Data exchange using a data export at operating system level.
<none>
Tools --> Administration --> User Maintenance --> Roles --> Environment --> Mass Transport
Mass transport of roles
<none>
Tools --> Administration --> User Maintenance --> Roles --> Role --> Upload/Download
Upload/Download of Roles
SU25
Point 3.
Transport of Check indicators
STMS
Tools -->Administration --> Transports --> Transport Management System
Transport Management System

System configuration

Transaction Code
Menu Path
Purpose
RZ10
Tools --> CCMS --> Configuration --> Profile Maintenance
Maintain system profile parameters.
(auth/no_check_in_some_cases = Y). .
RZ11

Description of system profile parameters
SM01
Tools --> Administration --> Administration --> Transaction Code Administration
Lock transaction codes from execution

Authorization Object

Transaction Code
Menu Path
Purpose
SU20
Tools --> ABAP Workbench --> Development --> Other Tools --> Authorization Objects --> Fields
List of authorization fields
SU21
Tools --> ABAP Workbench --> Development --> Other Tools --> Authorization Objects --> Objects
List of authorization objects (Initial screen lists by object class)

Audit

Transaction Code
Menu Path
Purpose
SE84
Tools --> Administration --> User Maintenance --> Information System
Information System for SAP R/3 Authorizations
SECR*
 <none>
Audit Information System

Table maintenance

Transaction Code
Menu Path
Purpose
SM30
(Tables
V_BRG,
V_DDAT)
System --> Services --> Table Maintenance --> Extended Table Maintenance
Create table authorization groups (V_BRG)
Maintain assignments to tables (V_DDAT)

Table Group

Transaction Code
Menu Path
Purpose
SE43
ABAP Workbench --> Development --> Other Tools --> Area Menus
Maintain (Display) Area Menus