Analyze Authorizations - Analyze Users - Analyze Profiles

 

In this example, the Results Container's specifications have been set to AND / NO / NO.

 

The following screenshot shows only those users who

• Have authorizations for all audited objects (AND)

• Have authorization to execute none or more audited transaction codes (NO)

• Have been or have not been included in the norm (NO)

 

 

When an authorization entry in the buffer area is selected, all other areas import information of this authorization from the prepared download SAP data. Those areas answer following questions: Which profile contains the selected authorization? Which values is it made of?

Additionally, the Users area returns all users which have been assigned this authorization.

 

Tip: Double-clicking users or authorization objects or fields display in-depth information.

 

Note: The ‘Users’ area is the sum of the assigned users for profiles &_SAP_ALL_1 (USER001, USER003, USER009) and IDES_ALL_1 (USER010 and USER022).

 

 

The profiles &_SAP_ALL_5, F_ANZ, IDES_ALL_4, … contain at least 1 authorization for the S_Tcode object, hereby providing transaction code access to their assigned users.

 

Note: The list of assigned users refreshes as you click another profile. You can equally double-click a profile to call a dialog box with the profile’s details.

 

In this example, the Results Container's specifications have been set to: AND / YES / NO.

 

The following screenshot shows only those users who

• Have authorizations for all audited objects (AND)

• Have authorization to execute at least one of the audited T_Codes (YES)

• Have been or have not been included in the norm (NO)

 

When an authorization entry in the buffer area is selected, all other areas import information of this authorization from the prepared download SAP data.

 

Those areas answer following questions. Which profile contains the selected authorization? Which values is it made of?

Additionally, the S_TCODE area returns authorization information for this object in order to show which transaction code(s) the selected user can execute.

 

Tip: Double-clicking users or authorization objects or fields displays in-depth information.

 

 

Note: The ‘Users’ area is the sum of the relevant assigned users of profiles &_SAP_ALL_1 (USER001, USER003, USER009) and IDES_ALL_1 (USER010 and USER022).

 

 

Since the T-code logic has been set to YES, the audit result screen has been reduced to the set of users which have S_tcode authorization.

Therefore, the listed ‘Authorizations’ profiles are profiles which have been assigned to users with S_tcode authorization.

 

In the previous example, users USER004 (Alex Mighty) and USER030 (Ann Peeters) have no S_tcode authorization and have been assigned as only users of the audit results screen to profile F_DEBITOREN.

Therefore, this profile is no longer listed in the above screenshot.

When profile F_DEBITOREN would have been assigned to a user of the audit result screen that has S_tcode authorization, it would still be listed here.