Object level checking for some of the basis tcodes(internal audit)

Hi masters,
in our company every month we check access controls for some of basis tcodes,i am giving it below,is the selection for Tcode and object level values combinations are correct or is there any modifications please notify.
Tcodes     Imp Auth Objects     Auth fields     Auth  values
SCC1     S_CLNT_IMP     Actvt     21,60
     S_TABU_CLI     CLIIDMAINT     X
SCC4     S_TABU_CLI     CLIIDMAINT     X
     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SCC5     S_CLNT_IMP     Actvt     21,60
     S_TABU_CLI     CLIIDMAINT     X
SCC7     S_TRANSPRT     Request type     *
          Actvt     43,60,75
     S_CLNT_IMP     Actvt     21,60
SCC8     S_DATASET     PROGRAM     *
          Actvt     06,34,A7
     S_TRANSPRT     Request type     *
          Actvt     43,60,75
SCC9     S_TABU_CLI     CLIIDMAINT     X
     S_CLNT_IMP     Actvt     21,60
SCCL     S_TABU_CLI     CLIIDMAINT     X
     S_CLNT_IMP     Actvt     21,60
SCU0     S_TABU_DIS     Authorization Group     SS
          Actvt     01,02
     S_TABU_RFC     Actvt     3
OBR1               
SM01     S_ADMI_FCD          TLCK
SM04     S_ADMI_FCD          PADM
SM12     S_ENQUE     S_ENQ_ACT     DPFU,DLOU
SM13     S_ADMI_FCD          UADM,UMON
SM50     S_ADMI_FCD          PADM
SM54     S_ADMI_FCD          NADM
SM55     S_ADMI_FCD          NADM
SM56               
SM59     S_ADMI_FCD          NADM
               RFCA
SMLT     S_LANG_ADM     Actvt     02,16,61
          Table     *
SPAD     S_SPO_DEV     SPODEVICE     *
SP01     S_SPO_DEV     SPODEVICE     *
     S_ADMI_FCD          SP01,SP0R
ST01     S_ADMI_FCD          ST0M,ST0R
ST05     S_ADMI_FCD          ST0M,ST0R
RZ04     S_RZL_ADM     Actvt     1
RZ06     S_RZL_ADM     Actvt     1
RZ10     S_RZL_ADM     Actvt     1
RZ21     S_RZL_ADM     Actvt     1
     S_BTCH_JOB     JOBGROUP     *
          JOBACTION     DELE,RELE
SM49     S_LOG_COM     Command     *
          Opsystem     *
          Host     *
     S_RZL_ADM     Actvt     1
SM69     S_RZL_ADM     Actvt     1
SM63     S_RZL_ADM     Actvt     1
SMLG     S_RZL_ADM     Actvt     1
SE16     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SM30     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SM31     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SPRO     S_PROJECT     PROJECT_ID     *
          APPL_COMP     *
          PROJ_CONF     *
          Actvt     02,06
     S_DOKU_AUT     DOKU_ACT     MAINTAIN
          DOKU_DEVCL     *
          DOKU_MODE     *
SPRO_ADMIN     S_PROJECTS     APPL_COMP     *
          PRCLASS     *
          Actvt     01,70
     S_PROJECT     PROJECT_ID     *
          APPL_COMP     *
          PROJ_CONF     *
          Actvt     02,06
PFCG     S_USER_AGR     ACT_GROUP     *
          Actvt     01,02
     S_USER_PRO     Actvt     01,02
          PROFILE     *
SM19     S_ADMI_FCD          AUDA,AUDD
SU01     S_USER_AGR          *
               01,02
     S_USER_GRP     Class     *
          Actvt     01,02
SU02     S_USER_PRO     Profile     *
          Actvt     01,02
SU03     S_USER_AUT     OBJECT     *
          AUTH     *
          Actvt     01,02
     S_USER_PRO     Profile     *
          Actvt     01,02
SU05               
SU10     S_USER_GRP     Class     *
          Actvt     01,02
SU12     S_USER_GRP     Class     *
          Actvt     01,02
SU20     S_DEVELOP     DevClass     *
          ObjectType     SUSO
          ObjectName     *
          P_Group     *
          Actvt     01,02
SU21     S_DEVELOP     DevClass     *
          ObjectType     SUSO
          ObjectName     *
          P_Group     *
          Actvt     01,02
SU22     S_DEVELOP     DevClass     *
          ObjectType     SUST
          ObjectName     *
          P_Group     *
          Actvt     01,02
CMOD     S_DEVELOP     DevClass     *
          ObjectType     CMOD
          ObjectName     *
          P_Group     *
          Actvt     01,02
SA38     S_PROGRAM     P_Action     SUBMIT,BTCSUBMIT
          P_Group     *
SD11     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     UDMO,UENO
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE11     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     DOMA,DTEL.ENQU
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE12     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     DOMA,DTEL.ENQU
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE13               
SE14     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     INDX.MCID,TABL
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE15     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     3
SE37               
SE38     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     FUGR,PROG
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE93     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     TRAN
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE41     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE43     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     3
SE43N     S_DEVELOP     DevClass      '
          ObjectType      '
          ObjectName      '
          P_Group      '
          Actvt     01,02
SE51     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     FUGR,PROG,DYNP
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE80     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE81     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE82     S_DEVELOP     DevClass     Y,Z
          ObjectType     APPLTREE
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE91               
SE92               
SE92N               
SNRO     S_NUMBER     NROBJ     *
          Actvt     02,17,11
SQ00     S_QUERY     Actvt     02,23
SQ01     S_QUERY     Actvt     02,23
SQ02     S_QUERY     Actvt     02,23
SQ03     S_QUERY     Actvt     23
SQVI               
SM35     S_BDC_MONI     BDCAKTI     ABTC,AONL,DELE
SM35P     S_BDC_MONI     BDCAKTI     ANAL
SM36     S_BTCH_ADM     BTCADMIN     Y
SM37     S_BTCH_JOB     Jobaction     PROT,SHOW
          Jobgroup     *
SM39               
SM62               
SM64     S_BTCH_ADM     BTCADMIN     Y
SE01     S_CTS_ADMI     CTS_ADMFCT     EPS1,EPS2,PROJ
     S_TRANSPRT     Actvt     *
          Ttype     *
SE06     S_C_FUNCT     PROGRAM     SAPLSTRF,SAPLSTRI
          CFUNCNAME     SYSTEM
          ACTVT     16
     S_TRANSPRT     Actvt     43,60,65
          Ttype     *
SE09     S_TRANSPRT     Actvt     43,60,65
          Ttype     *
     S_CTS_ADMI     CTS_ADMFCT     EPS1,EPS2,PROJ
SE10     S_TRANSPRT     Actvt     43,60,65
          Ttype     *
     S_CTS_ADMI     CTS_ADMFCT     *
SPAM     S_CTS_ADMI     CTS_ADMFCT     IMPA,IMPS
     S_TRANSPRT     Actvt     43,60,65
          Ttype     PATC,PIEC
STMS     S_CTS_ADMI     CTS_ADMFCT     *
     S_RFC     Actvt     16
          RFC_NAME     EPSF,STPA
          RFC_TYPE     FUGR
Edited by: rameshbabu muddana on Mar 2, 2009 10:56 AM

hi,thanks for reply "you should not care about the transaction start s_tcode at all - only check the object required"
It has made manditory policy to check for users and roles every month with given criteria of Tcode and object,now i have been given the task to check the combination of Tcode and object value combination are correct or not,please validate the combinations and suggest,we are using ECC 5.0,i had gone through wild card use (#) when we check in SUIM,i am getting confused that when i give # followed by value, data i am getting different from without #.please provide an example for SE16 with S_TABU_DIS
how to check?
i am checking in this way
S_TCODE       SE16
S_TABU_DIS
Activity                   
Value  01or 02
Authorization Group
Value  #&NC&

Similar Messages

  • Regular Expression to check for some of the special characters

    Can someone please provide me a RegularExpression to check if a string contains any of the speical characters i.e. *!@#$%^&*()_+ []{}:;',./<>?~`*
    Thanks
    Edited by: whitesox12 on Apr 3, 2008 9:46 PM

    [*!@#$%\^&()_+\[\]{}:;',./?~`]In a Java string literal, a backslash should be written as two consecutive backslashes.

  • For some reason, the Flash Player on my MAC Pro stopped working, I've checked the install on my Adobe Flash Player and the are current, but the plug-ins don't seem to be working.  Can anyone help me get it working?

    For some reason, the Flash Player on my MAC Pro stopped working, I've checked the install on my Adobe Flash Player and the are current, but the plug-ins don't seem to be working.  Can anyone help me get it working?

    It happened w/ my MacPro 2.66 GHz Dual-Core Intel Xeon about 5 months ago; tried everything I could think of including multiple downloads of Flash, and hadn't seen any solutions here.  Adobe insisted many times that I download & update, but the newest vers. wouldn't work on the computer.
    On checking Adobe/Flash was reading the computer as being an earlier model. So the new version of Flash wouldn't work w/ it.  Snow Leopard 10.6.8 was being read correctly but not the computer model (can't remember what MP model  it was reading).
    Nothing worked. So -- a very old PC trick: If nothing else works get the hammer out and bludgeon it-- might work. So I reset everything by putting the Snow Leopard  install disk in, held down 'C' on restart and let it run. 
    Didn't take anything off the HDD first, just ran the install disk over everything.
    The experts on the forums are probably cringing right now & I'd like very much for them to jump in. Love to know how my computer model was being mis-read. All I can say is, for the brave and desparate, it worked for me. Something to keep in mind.
    It helped that I had a new computer on order & have 2 backups, one being mandatory. Might work only the one time but worth a check.
    Good luck on working this one out.

  • Cost estimate (CK11N)is not picking the overhead cost for some of the mat

    Hi all,
    we are facing a problem. The overhead key is defined. the calculation base is defined in the cost sheet. But the overhead cost is not picking  for some of the materials
    Bad Material 5019-0581 via CK11n.
    As you can see in the itemization, only the material and the routing are listed.  No amounts from the OH of ZPTA ( .10).  It should show a line #5 with an amount of (28 quantity  x .10) = $2.80 added to the Total value.
    first three line items it is picked from material and fourth line item from the internal activity.
    the fifth item from G overhead is not picked.

    Hi,
    Check whether u have assigned the cost sheet in u r costing variant which is being used in CK11N.
    Regards
    SudhakarReddy

  • VL10G is not creating delivery for some of the confirmed scheduled lines

    Hi, I was trying to find the reason why we are getting a very generic error message (Message type V50R ID 036 - The document could not be delivered.) for some of the confirmed schedule lines when executing VL10G in batch and no delivery document is created. Those orders have confirmed scheduled lines and inventory has confirmed to have stock. However, when the VL10G is executed in background, the sales order line items will be captured into the list but when creating delivery, the systems is showing the above error message.
    From debug, found out the message is generated from LV50R_VIEW43.
    We went through lots of OSS notes but nothing seem to ring a bell here. We are using ECC6, list type = index list.
    The error message is very inconsistent. The same documents will be dropped for delivery after several days without any change to any of the sales document or inventory level.
    Some of the note mentioned the parallel processing lock on ATP check for the material may be the reason for the error however we are not using any parallel processing in VL10G. We also checked the index table VEPVG has all correct entries and all the entries are being selected into the delivery due list. Error happens when the delivery is trying to be created.
    Any advice is appreciated.
    Thanks.

    Hi ALL,
    Any suggessiton on the below issue.
    We have batch jobs to process the DDL for the STOs, but some of the line items of the same STO is not picked up by batch job, (VL10B is assigned in the batch job, i checked the variant and configuration, everything seems to be fine, when i try to process the DDL through VL10B manually by giving the STO number only, the VL10B program is not picking the STO, but the same STO can be processed through VL10D, what could be the problem and why the VL10B program is not recogonizing the STO for the delivery creation.
    We are using ECC 6.0
    Regards,
    Rajesh.R

  • Initial Balances for some of the G/L Accounts  in GLPCT table changed

    Sub : G/L Account Balance( T code FAGLB03 )  and EC-PCA: Totals Table (Table GLPCT) initial balances are not same for some of the G/L accounts ( Initial Balances for some of the G/L Accounts and profit centers in GLPCT table changed )
    Dear Friends
    We are in SAP ECC 5.0. We are using New G/L Accounting
    G/L Account  Balance(Initial Balance)( T code FAGLB03 )  and EC-PCA: Totals Table (Table GLPCT) initial balances are not same for some of the G/L accounts ( Initial Balances for some of the G/L Accounts and Profit centers in GLPCT table changed )
    G/L Account : 1110001 AR Trade - Recon
    G/L Account Initial  Balance( T code FAGLB03 )          36,789,209.26 USD
    EC-PCA: Totals initial balance  (GLPCT table)                14,178,848.14 USD
    I found in GLPCT table initial balances for G/L 1110001 and some of the profit centers are changed. The initial balances are not supposed to change for the entire financial year
    I have checked   none of  documents for this G/L and these Profit centers of last financial year  have been posted or reversed in current financial year.
    Please try to help me what has caused to changed the initial balances and how to correct it
    Please let me know if you guys need more details
    Thanks in advance
    Thanks
    MVS

    Hi Vinay,
    If I understood correctly you are trying to balance  Accumulated Depreciation accounts (from the AA module) with the Cost Depreciation Accounts.
    If they don`t balance zero, it mostly likely means, that some user has posted manually deprecian in your GL, not using the depreciation program.
    Hope this helps.
    KR
    Severina Koleva

  • Trying to install adobe acrobat pro 9 on a new laptop after deactivating it on old laptop. After installation I get Update check for some reason then doesn't let me go any further Anyone know why this is?

    OK so I have deactivated and uninstall the version off the old laptop, then reinstalled the version on the new laptop. When you go to open a document it says it wants to do an upgrade check for some reason, anyone know why this is? It will not take the serial number after that and it doesn't show the version we have in the drop down list.

    Hi johnb49273320,
    What operating system are you running on the new laptop? If it's a current OS, then it may be incompatible with Acrobat 9. Please see https://helpx.adobe.com/x-productkb/policy-pricing/system-requirements-acrobat-family-prod ucts.html.
    It could also be that you're trying to install an upgrade, and the installer is looking for the serial number for the previous version (is the previous version listed in the drop-down list?).
    Best,
    Sara

  • Mac OS X 10.6.8, receiving error message "Failed to check for updates. The operation couldn't be completed. Operation not permitted." How to fix?

    When I try to update my software, I'm receiving the error message "Failed to check for updates. The operation couldn't be completed. Operation not permitted."
    I'm using Safari 4.0.3. Yes, I know this is an old version of Safari - I can't update it, or any other software on my MacBook. Should I just wait for the Lion OS, or is there any kind of fix a non-technical Mac user like me can attempt without screwing up her laptop?
    I've tried clearing my cache and resetting Safari already - doesn't help. I've also tried to update after disabling my (Norton) antivirus software, thinking that might be interfering. None of these help.
    I don't know if it's a related problem, but also I can't download .pdf files from the internet, although I used to be able to.

    You should use the NortonAV uninstaller to uninstall it. Disabling the dreadful thing in the past hasn't always been sufficient for it to cease creating system havoc. The Mac NortonAV version has a long and well-earned reputation for doing truly seriously nasty things to OS X. Shame on Comcast for inflicting NortonAV on its Mac customers. It's not a matter of if NortonAV will mess up OS X but when and how badly. I can't help but wondering if some setting in your Norton AV has decided that NortonAV, rather than you, will be making executive decisions about what you are allowed to install on your computer and is keeping that fact a secret.
    After you are done uninstalling Norton use the finder to search for any Norton files that the uninstaller might have missed. Add the option to search for invisible files.
    After you have removed all the Norton bits and pieces restart in safe mode by holding down the shift key right after the startup chime. Keep holding down the shift key until you see the Apple logo and spinning gear. Safe mode does some maintenance tasks which means a much longer than normal startup time. Use Disk Utility to repair permission
    If your Mac works normally in safe mode restart. If things still aren't fixed you might want to give another shot at reinstalling Snow Leopard from the install DVD and applying the Mac OS X 10.6.8 Update Combo before taking your Mac to the Apple Store.
    If you feel the need to run AV software on your Mac use ClamXav in manual mode. It's donationware and doesn't seem to cause the litany of weird problems that are associated with other AV software.

  • Unable to Create or Extend customers for some of the co_cds

    Hi Folks,
    We are creating customers for some of the company codes to client org. it has number of company codes. we are able to extend customers Except Italy, Iraq and Nigeria Co_cds. The reason given is that field KNB1_QLAND is not on screen SAPMF02D 0610. This field is for With Holding Tax. Recently we have upgraded to ECC 6.0 version from R/3 4.7. what is cause to not creating customers for some regions.
    Please give some needful suggestions.
    Thanks
    Vinay.

    Hi Vinay,
    It looks like that in the customization "Assign withholding tax type to company code" in SPRO, subject to w/tx is selected in customer master data section. So, system is expecting the relevant informtaion. Check in Customer account group field status (T. code OBD2), the Withholding tax country field might have been set as suppressed. Check it and correct the same.
    BR
    Amitash

  • For some reason, the battery in my iPad2 is not charging. Has anyone else experienced this problem? If so, how did you remedy it, please?

    For some reason, the battery in my iPad 2 , ioa 7.1.2m has stopped charging. Has anyone else experienced this problem? If so, how did you remedy it, please ?

    Batteries do have a finite life span.
    That said there have been some users reporting battery issues but but there's no way to know what or why or how it happens.
    You can try a reset. Hold down the sleep and home keys for about 20 seconds. Let it reboot and see if that helps.
    If you have spares, you can try to swap out your charger and cable, just to see if there's any difference with them changed.
    Another thing you can try is a restore. That's basically where you back it up and then restore it from a backup. (something to do a bit more research into if you plan to do it).
    if you don't want to do that then you can make an appointment at your local apple store and have them check it out.

  • Apple TV - i'd like to watch what i paused. The system says i have to go to itunes and 'check for downloads.' The wheel keeps spinning..... the system won't let me rent again.

    Apple TV - i'd like to watch what i paused. The system says i have to go to itunes and 'check for downloads.' The wheel keeps spinning..... the system won't let me rent again.

    Question is a bit unclear.  Once you start a rental, you have 24 hours to complete it. I pause mine all the time.  When I hit play again, I get a choice to either resume where I left off or start all over.  I believe it is necessary to have an internet connection while view ATV content, so if you lost the connection, that might make it "spin".
    Re your tag line "Can I view my ATV thru my iPad?"  If you have a wifi connection, you can view almost anything with AirPlay.  Or you can view anything from the various ATV selections without having your iPad on.  Of course, you have to pay for some options like HBO, Netflix, etc.

  • Authorization level check for Condition records.

    Hi,
    Hi Gurus,
    Pls help me out in the the following scenario.
    I want to activate Authorization level check for Condition records.
    For example, Product price PR00 is being entered by first level.
    After verification done by second level only, that condition record to be used for sales order processing.
    I have gone through Process status & Release Status. But once it is Blocked  i am not able to release it...
    Rgds,
    Amol

    Amol,
    Please confirm transaction code you are using in this scenario to release. I can help with this, just a little more detail.
    Thanks,
    Jay

  • HT1918 I can't seem to update my apps or make any purchases on from my account. Nothing has changed with my credit card information and for some reason the iTunes Store tells me my information is incorrect. What do I do?

    I can't seem to update my apps or make any purchases on from my account. Nothing has changed with my credit card information and for some reason the iTunes Store tells me my information is incorrect. What do I do?

    Yes, it's frustrating.
    I don't have my iPod with me but, as I recall, the change is done in Settings/Store.  That change will apply to NEW purchases.  However, be aware that all purchases are permanently associated with the Apple ID that was originally used.  Generally, it's only a problem when you need to update an app.  IF you do your updating from iTunes and your logged in to the "wrong" ID, you'll need to log out and back in again.  It's easier from the iPod as you do not need to log out/in but you do need to know the password.
    Unfortunately, you can not merge IDs nor can you transfer purchases from one ID to another.  Go here to find out exactly what you have.  I have the same problem so I deliberately made both passwords identical to make things slightly easier for me.

  • When i try to open week cal it loads and then closes after a few seconds...I have checked for updates, turned the phone off then on, closed out of the app and then opened it again...nothing works!  Any suggestions?

    When i try to open week cal it loads and then closes after a few seconds...I have checked for updates, turned the phone off then on, closed out of the app and then opened it again...nothing works!  I have thought about deleting the app from my phone and then reloading it again but I worry that it will delete all my calendar info???  Any suggestions?

    To reset, press and hold the Home and power buttons until the silver apple appears.
    I would delete the app, reset the phone and then download the app again. Your calendar information should be stored on the phone as Week Cal uses the Calendar app information.
    Best of luck.

  • I currently have iTunes version 7 and I need to upgrade to version 10.  I am afraid of losing all my music if I just download 10 and when I use the "Check for updates" in the version 7 help menu, it tells me the server cannot be contacted.

    I currently have iTunes version 7 on my computer and need to upgrade to version 10 to sync my new nano iPod.  When I tried the "check for updates" under the version 7 "help" menu, it said it could not contact the update server.  I am afraid if I just download version 10 from the website, it will wipe out my music library.  What should I do to upgrade?

    Back up your music and install from the website. You probably won't need to do this, but if your library is erased, restore it from the backup.
    (59049)

Maybe you are looking for

  • Production consumption variance w.r.t. Costing BOM

    Dear Sir / Madam, Our client is using BOM usage 1 as well as BOM usage 6 i.e., Production BOM and Costing BOM. Consumption of Raw materials and MRP happens based on the BOM usage 1. Costing of FG happens  using BOM usage 6. Users want to have a varia

  • Adobe Media Encoder CS5.5 (5.5.1) update available

    The Adobe Media Encoder CS5.5 (5.5.1) update is available. This update fixes a few major bugs. After you've installed the update, let us know how it works for you.

  • Incorrect menu being displayed after several forms are called and closed

    Have been searching and agonizing for a few hours and still can't find the reason for this. Forms v9i web version The starting form (main_form) has a custom menu (cus_menu) and this is displayed when the user begins the application. Form B can be cal

  • Left Justify Wrapping Text Lines in Lists

    I'm using RH9 on Windows XP, fully patched. I'm having a problem finalizing a few tweaks with the formatting of lists imported from FM.It took me a while to get the lists from the FM source book to import correctly, but now I have it pretty clean, wi

  • Tax code V0 does not exist for jurisdiction code IN00 Message no. FF718

    Hi, i have configured as per suggestion in message as well as assign Jurisidiction code in taxcode in FTXP, but when i try to create PO with tax code V0 and jurisdiction code IN00 then we are facing error "Tax code V0 does not exist for jurisdiction