如何檢查某使用者是否分配了某ABAP許可權物件

i042416發表於2020-02-09

For example, I would like to check whether my user has enough authorization defined by authorization object s_carrid with value actvt = 03.

如何檢查某使用者是否分配了某ABAP許可權物件

In tcode SU01, I can only see PFCG roles assigned to my user. Note that authorization object is not directly assigned to user but to PFCG roles. So, PFCG roles act as an intermediate layer:

User <- PFCG role <- Authorization Object

如何檢查某使用者是否分配了某ABAP許可權物件

This table stores for a given user, what PFCG roles are assigned to it.

如何檢查某使用者是否分配了某ABAP許可權物件

Now I need to figure out, which PFCG role has been assigned with authorization object S_CARRID?

Tcode SUIM:

如何檢查某使用者是否分配了某ABAP許可權物件

The following PFCF roles have authorization object S_CARRID assigned:

如何檢查某使用者是否分配了某ABAP許可權物件

Double click one of them, for example SAP_QAP_DEVELOPER:

如何檢查某使用者是否分配了某ABAP許可權物件 如何檢查某使用者是否分配了某ABAP許可權物件 如何檢查某使用者是否分配了某ABAP許可權物件

The above pictures mean: If a given user is assigned with PFCG role SAP_QAP_DEVELOPER, the user wil automatically have enough authorizations ( ACTVT 01, 02 and 03 all allowed ) defined by authorization object S_CARRID.


來自 “ ITPUB部落格 ” ,連結:http://blog.itpub.net/24475491/viewspace-2674852/,如需轉載,請註明出處,否則將追究法律責任。

相關文章