Most Important Tables to Remember in SAP Security

These are the most importatn tables you need to remember. The last one is a file. These tables comes in handy when you need to extract data. There are instances in which data taken from suim is inaccurate. Using this tables and sqvi you can extract any data you need.

• AGR_AGRS - Shows simple roles within composite roles
• AGR_USERS - Shows user information for roles
• AGR_TCODES - Shows transactions assigned to roles "through the menu"
• AGR_1251 - Shows authorizations for roles; if you restrict it to authobj
• S_TCODE, you can see more than table AGR_TCODES shows you

How to view recently accessed transactions by users

There are two ways to do that
1) Turn the audit log on by using SM19 and SM20 and analyze the audit logs.Put filters while setting up these logs so that you can see the specific data.

2) In ST03N / ST03, you can analyze the transactions run by users by selecting the "User Profile" under the "Analysis Views" section.

Note: ST03N keeps limited data

How to check if CUA is used

1) How do we know if Central User Administration (CUA) is used in a system?
You can quickly run transaction SU01 and see if the "Systems" tab is available. If it is then CUA has been configured. Well there is another way to see whether CUA is used. Run transaction code SCUA to see if there are any distribution models defined. Run transaction code SCUL to see to view logs that are generated by CUA & if you have logged into a child system, then goto transaction code SU01 and see, there will be no CREATE activity.





2) How to find derived roles under the master roles

1) Goto transaction SE16
2) Enter the table name : agr_define
3) Enter the master role in the second role field ( this field is in the second row) and execute
4) Then you will see the derived roles based on the master roles

How to move the favorites from one user to another

If you want to move the favorites menu from one user to another user, easiest way would be using function modules. They make your work easy. The steps to be followed are 1) goto transaction code SE37,
2) Enter the function module name MENU_FAVORITES_DOWNLOAD , test run the module,
3) The enter the source user name in the field that appears & execute. You will be prompted for a local path or directory to save the file. Just give the file name as some user_source.mnu and save the file
4) Now enter run a function module MENU_FAVORITES_UPLOAD test run the modules
5) Enter the name username in which you want upload the menu favorites. It will prompt you for the file.
6) This operation require user login details