Relationship between Authorisation objects and Tcode

Question

Dear all, </br>
In 4.6C </br></br>
I go to Tcode SU01-> Tcode assignment->provide MB1A for tcode->F8-> value list, then I get the list of Authorization objects associated to this tcode.</br></br>
Access to Tasks in General Notifications</br>
Authorization for document activities</br>
CS BOM Authorizations</br>
Authorization for Class Types</br>
Consolidation: Authorization for subgroup</br>
PM: Task List</br>
PM: Transaction Code</br>
CO-CCA: Cost Center Planning</br>
EC-PCA: Delete transaction data</br>
EC-PCA: Actual Data Transfer</br>
Warehouse Number / Storage Type</br>
Transaction Codes in the Warehouse Management System</br>
Document Type in Purchase Requisition</br>
Purchasing Group in Purchase Requisition</br>
Plant in Purchase Requisition</br>
Purchasing Organization in Purchase Order</br>
Evaluation Structure: Application</br>
Material Master: Maintenance Statuses</br>
Personnel Planning</br>
HR: Reporting</br>
HR: Master Data</br>
HR: Master Data - Extended Check</br>
HR: Master Data - Personnel Number Check</br>
Use of Group Codes</br>
Quality Notification Types</br>
QM Transaction Authorization</br>
Business Process Quality Notifications</br>
System Authorizations</br>
ALV Standard Layout</br>
Background Processing: Background Administrator</br>
Background Processing: Operations on Background Jobs</br>
Administration Functions in the Change and Transport System</br>
C Calls in ABAP Programs</br>
Authorization for File Access</br>
ABAP Workbench</br>
SE61 Documentation Maintenance Authorization</br>
Authorization for GUI activities</br>
IMG: Authorization to Perform Functions in IMG</br>
Language administration</br>
SAPoffice: Authorization for an Activity with Documents</br>
SAPoffice: Attribute of Office User</br>
Authorization Object for Sending</br>
OLE Calls from ABAP Programs</br>
ABAP: Program run checks</br>
IMG: New Authorizations for Projects</br>
Authorization check for RFC access</br>
Change documents</br>
Spool: Device authorizations</br>
Spool: Restriction on Maximum Number of Pages</br>
Cross-client Table Maintenance</br>
Table Maintenance (via standard tools such as SM30)</br>
Authorization Check for Transaction Start</br>
Transport Organizer</br>
SAP ArchiveLink: Authorizations for access to documents</br>
Sales Document: Authorization for Sales Document Types</br>
Sales Document: Authorization for Sales Areas</br></br></br>
This information is fetched from the table USOBX where name = MB1A and type = 'TR'</br></br>
When I  create a role in PFCG say ZTEST_ROLE and assign the <b>only one tcode MB1A</b>, I get additional authorisation objects below</br></br>
CO-PC: Product Costing</br>
Material Master: Company Codes</br>
Material Master: Warehouse Numbers</br></br>
Why do I get these additional objects ? What is the logic behind this?</br></br>
My requirement is to check the authorisation objects associated to a Tcode.</br></br>
Thankyou.

Answer 1

hi
there would be many authorisation objects for a tcode (like create,change display).....so if user is having that particular authorisation object only then he can do a particular activity in that tcode.
Regards
Sajid