Table authorization group SE54

fellows,
i created new authorization group in SE54 and assigned some tables to new auth. group. but now the business is asking me to reverse the whole thing, which means assign tables to auth. group assigned previously. but i dont remember previous auth. group. is there any i can find out that how it was before i made the changes? you help will be appreciated.

You can only do that by using the "negative list" approach - also previously known as "ranging" in R/3...
At least it checks something, but the user might have access to everything which you do not exclude in their authorizations or the code.
Chances are very good, that users will have many different ways to access tables directly. So depending on how disciplined you are about your security concept, it might well be that they will bypass transaction code restrictions, organizational logic (contents of the table fields) and other programmed authority-check or file system logic to access / download data if they are determined.
Most users do not knowingly deploy such tools or queries, but that is of course no reason not to protect business or legal critical data, and other data.
Cheers,
Julius

Similar Messages

How to find tables changed from one table authorization group to other.

Hi Experts,
We have a issue where certain tables have been moved from one Authorizaiton group to the othe table authorization group.
We want to find all tables previous authorization group.
Is there any wayt we could find the old authorization group.
(for example)
Consider a scenario where a table agr_1251 was moved to the new auth group ZAUTH.
I wanted to find which auth group was holding the table agr_1251 previously.
Can you please help me on this request?
Thanks.

One more way is to check TR (Table E070, E071). But you need to find the details for table (Like for role it is R3TR, ACGR).
Regards,
Arpan Paik

Find when table Authorization Group was changed

Dear Experts,
Kindly help me on finding this. Table T001B have standard Authorization group as FB31 but it has been changed to &NC& by some one. It means &NC& means there is no Authorization group assigned to the table. I need to find when it was changed. Do i have any ways to find it out? I checked with entering table name in CDPOS i didnt find any entry. Kindly help me out how to find who and when this table Authorization group was changed for table T001B.
Thanks & Regards,
Sathish

Thanks Thomas,
I check in that transaction it shows log only for 3 months. I dont see any changes to those table what i want may be this Authorization group change in done even older.
Thanks for your reply.

How can i transfer the 'Authorization Group'(SE54) to another client?

In project i must define an 'Authorization Group' in T-Code SE54---The 3rd radiobutton.
But there is no message to me to entry the Request NO.?
How can i transfer the 'Authorization Group' ?
I konw the date can be show from view 'V_BRG_54' ,but how to transport the data of the view?
TKS a millon~~

Hi,
If your client is set for automatic recording of changes it should prompt for a transport, check there is not another client where you should make config changes. If not, the menu option Table View -> Transport will let you assign the Auth group to a transport.
Regards,
Nick

ASSIGN AN AUTHORIZATION GROUP TO MANY TABLE

Hello,
I have several hundreds table to assgin an authorization group zaut.
Is there any easy way to do it?
I do not want to go se54 and change all table authorization group one by one.
Please help.
Thanks,
Jeongbae

Use Tcode SM30V_DDAT to assign the Authorization Group to multiple tables.
Regards,
Naimesh Patel

Check available authorization groups

Hi ,
if a custom table needs to be assigned to an authorization group in SAP.
Which is the transaction to check users assigned to an authorization group?
Currently i have an idea that Assigning and Creating authorization groups are dealt in SE54 but i cannot find a way to check
whether users are assigned to an authorization group...!!!
thanks
kritika

Checking Assignment of Authorization Groups to Tables:
You can also assign authorization groups to tables to avoid users accessing tables using general access tools (such as transaction SE16). A user requires not only authorization to execute the tool, but must also have authorization to be permitted to access tables with the relevant group assignments. For this case, we deliver tables with predefined assignments to authorization groups. The assignments are defined in table TDDAT; the checked authorization object is S_TABU_DIS.
You can assign a table to authorization group Z000. (Use transaction SM30 for table TDDAT) A user that wants to access this table must have authorization object S_TABU_DIS in his or her profile with the value Z000 in the field DICBERCLS (authorization group for ABAP Dictionary objects).
See also:
· SAP Notes 7642, 20534, 23342, 33154, and 67766
· Documentation for RSCSAUTH
Hope this helps.... if not check the following link
If you still don't find, search google 'table authorization groups in sap' - There are good info on web.
You can assign the authorization group to any custom table via SE11 - table - display - utilities - assign authorization group and rest follow the sap help (where to maintain and how to assign) .This is a developer and security persons work.

SE54: Assigning an authorization group to table &SM31&

Has anyone out there tried to assign an authorization group to the symbolic table &SM31& in transaction SE54?
Any success in using it?
Cheers,
Julius

Thanks Bernhard!
> But what I did find was [SAP Note 42563|https://service.sap.com/sap/support/notes/42563] .
> ...-->it's from 1997....!!
Note that the SM31 refered to in the note is not the SM31 we know today. It looks like SAP renamed it to SM31_OLD and replaced by a new SM31 (and the current settings option). The alternative having been changing miles of code, this seems reasonable but can be confusing (release dependently).
> Don't know if this is still used, as the check is in Rep.s SAPMSTBM, which is used in TX SM31_OLD, SM32, SM33 only.....
My rule of thumb is: If something is possible, then someone out there is either already doing it, or still doing it...
Cheers,
Julius

Authorization Groups and table TBRG

In our system we have tables which are using custom authorization group ZEXC. I am looking at this via SE11 Table Maintenance Generator or SE54 Assign Authorization Group.
I can also see that it is assigned to roles by using SUIM -->Roles-->By Authorization values -->entry auth object (S_TABU_DIS) and click on entry values.
What I am not seeing is that the authorization group is defined in table TBRG.
So my question is.... An authorization group does not need to be defined in order to attach it to a table or assign it to a role? If the authorization group was created then deleted is it still valid to have it attached to tables and roles?

Hi Sharon,
Assign the authorization to user and make it inactive mode.Then authorization will be deactived to tat particular user's.

SE54 Change Authorization Group

Hi all,
I have an immediate need -- a previous developer created a table view and generated a function group for maintenance. The authorization group they assigned was incorrect so I need to change it. How can I do this?
I went to SE54, changed the authorization group, then hit the "Change" button. It pops up asking for a "Reason for Change". My questions:
1. Will this overwrite the funciton group and generate a new one? I do not want this to happen.
2. Does it matter what reason I choose? There is not one for authorization group change.
Thanks in advance. Points will be awarded for helpful answers.
Message was edited by:
John S

Has anyone else encountered this problem? I have still not been able to find a solution.
A recap:
1. A previous developer created a custom table and a maintenance view to edit that table. Using the table maintenance generator he also developed some custom functionality and created a custom transaction to call this in SM30.
2. The table and maintenance view were created with &NC& authorization group.
3. We created a new authorization group that we need to assign to the maintenance view.
4. Somehow the auth group for the custom table was changed to the new auth group.
5. We have been unable to change the auth group for the maintenance view using a variety of ways.
Does anyone have any suggestions?

Which table could i find 'Authorization Group' used for Material master?

Hi experts,
Is there any table available could i find all 'Authorization Group' list as used by material master data.
OR in SPRO, anywhere could i find 'Define authorization group' for material master data specific??
Thanks.

Hi
Authorization group in the material master are maintained at the material type level.
SPRO->IMG-> Logistics - General-> Material Master-> Basic Settings-> Material Types-> Define Attributes of Material Types
List of authorization roups can be found in table T134-Material Types
this filed is a free defined 4 charcter field.
Thanks & Regards
Kishore

How to find tables contain in particular authorization group.

hi all
        By using SE11 , i just enter a table name like "MARA"
         then i go for display
        then by clicking utilities->assign authorization group
          i can get the info. about tablename and which authorization group(MM) the table belongs and its desc.
my question is if the Authorization group is MM, i need to know the list of tables belongs to that particular auth. group.
regards
pras

Hi Pras,
These are stoed in table TDDAT. you can use se16 for this table and enter MM in CCLASS field hit execute.
Ravi
[My SAP Blog|http://raviinsap.blogspot.com]

Table for Role & Authorization group

Hi Gurus,
I am looking for a table or FM to get all roles for Authorization group.
I tried in SUIM tcode but could not able to find exact DB table for these.
Giri
P.S.: To Moderator:
My earlier thread was locked for the same question, I was searching in SDN and google from last 3 days and could not able to find enough information on it. AGR_USERS, TBRG, TACT are the tables i found. But still there is a link missed between Role & Authorization Group.

Thomas,
My report have selection screen with Auth group and user.
If user provides Auth. Group then need to find all roles linked to auth group and users assigned to that role.
In my investigation, there is link between Auth. Group <--> Auth. object.
Also Auth. Object <--> Role.
but still there is a fine link missing between Auth Group <--> Role.
For Eg: Auth Object S_TABU_DIS will be associated to all Auth. Groups but assigned to only limited roles.
I tried to debug the SUIM transaction multiple times but couldn't find the tables to find the link and not able to find the FM's.
if anybody have any idea to find that link between Auth. Group & Role then it will be helpful....
Giri

Table showing Authorization group and Package

Hi
Is there any table where we can see the list of programs using BOTH selection crieteria Authorization group and package together?
Your help and time will be really appreciate.
Thanks,
Niki.

Hi Niki,
Try se84->Other Objects->Authorization Objects->choose one->Process->Complete list button on aplication toolbar.
Regards
Marcin

Viewing custom Z tables with blank authorization group

I'm trying to view all the Z tables without any authorization group (blank) in TDDAT. It only displays Z tables with &NC& or other valid groups we assign. Is there another table I can query to show ALL Z tables without an auth group?
Thanks.

> It only displays Z tables with &NC& or other valid groups we assign.
Oops, sorry. Martin had already mentioned this.
&NC& is not a valid group, it is a symbolic group which is the equivalent of a blank for the table - except that a view had been created for it and during that process no authorization group was set either. This also used to be the default, which doesn't really make sense... hence all the values.
If you take a look at FM VIEW_AUTHORITY_CHECK then you will see how it works and which tables are used.
Cheers,
Julius
Edited by: Julius Bussche on Feb 13, 2010 10:01 AM

Authorization group for table maintenance view

I need to create table maintenence view for a custom table, client provide name for auth. group, but no clue how to create auth. group.
can someone provide the steps to do this?

Hi,
Follow below steps to create table maintenance for a table and to assign authorization group to a table:
step1: Go to SE11 enter the table name
step2: In the standard toolbar you will find UTILITIES
Go to UTILITIES -> TABLE MAINTENANCE GENERATOR
You will go to first screen of Table maint. gen.
Here you will find to enter authorization group.
Thanks and Regards,
Shravan G.

Table authorization group SE54

Similar Messages

Maybe you are looking for