How to add SU53 missing autherization objects

Updated May 18, 2018

Hi,
I am new to SAP security . How to add missing autherization object to the user.
For Ex; I have created role and assigned DB02 to the user , but user not able to access that T-code . Then we will find missing objects in SU53 .

Please help me for to add missing autherization objects .

Cheers,
Chimsi.

Comments

13 Apr 2009 1:47 pm Guest

Hello Chimsi,

To know all the related object for that particular tcode just execute Su24 and in the transaction code window type the tcode you want then execute and when second screen shows press the "check indicator" button and it will show you the related objects for that tcode.

13 Apr 2009 1:47 pm Guest

Hi,
When the user tries to execute DBO2 he get the error no authorization. At that point type in /nSU53 and find out the missing object. Once you know the object and the field value, you go in to the role and add this object manually and generate the role. After this do a user compare and ask the user to logoff and login and he will be able to proceed further. Please let me know if you require anything else.

13 Apr 2009 1:47 pm Guest

Hi!

You are absoultely right no need to do anything findout Missing object in Su53 screen. Add Manually and generate rpofile and compare user.

Thnaks
Ashwin

13 Apr 2009 1:47 pm Guest

Hi,
Thanks for reply. Once i edit role from which menu i need to add the object manually .

13 Apr 2009 1:47 pm Guest

Hi,

Go to su01, type that user and select the role which is having the tcode (while execute missing authorisation), double click that role, in new session that role is openene. go to authorisation tabe and press the change button in top as well as below. An authorisation screen will appear, Here, you press the `Manually` tab, here you enter missing authorisation object which shown in su53 screen and proceed. I hope this will solve your problem.

Regards,

13 Apr 2009 1:47 pm Guest

Hi ,
Thank you very much .

13 Apr 2009 1:47 pm Guest

HI BASIS GUYS,

I have one query regarding auth. I have assigned the tcode SPRO authorisation to some finance user.
Q1. He is able to run the TR-SPRO, but whenever he is executing the any transcation within the SPRO, he is getting the error, no authorisation. How to give those authorisations?
Q2. If I want to restrict authorisations to some TRS within the SPRO,what I can do?
(i.e If I don`t want to give MM related transactions to FICO user within SPRO?)

Can anybody provide me the solution?

Advanced Thanks.
Hari
Basis Admin

13 Apr 2009 1:47 pm Guest

HI,

Try T.code SUIM you can see trancations assigned.

13 Apr 2009 1:47 pm Guest

Hi Hari,

1) What missing authorization is showing Under SU53, Just Check the Missing authorization for Tcode SPRO and add the missing values to the Role as per Requirement ( Like 01, 02 , 03... values ). If You will provide the SU53 i can tell you the exact soln.

2) You Can restrict the tcode SPRO access to FI and MM user`s by creating the two different role, and Add the authorization as per thier requirement.

I hope this will solve your problem.
Regards,

13 Apr 2009 1:47 pm Guest

Hi deepak,

Thanks. I will try it and come back to you.

13 Apr 2009 1:48 pm Guest

Hi,
Just go to PFCG -> authorization Tab, Change Authorization button, Either click on the Selection Criteria and select class and object or if u know the object directly click Manually button and give the object name it will add the objects and then u can mainatin the values as per your req.
Thanks
Vikash.