Question:
I would like to generate authorization reports.
The reports - where list all the users with list of plant that the user can access. Then the reports should alo includes the activity by object. for example user login JOHN - plant 100 - display in M_BANF_WRK (plant in Purchasing Requisation), plant 300, create (plant in Purchasing Requisation).
I am unable to produce such report in SAP. Does this kind of report able to be produce
Does anyone able to help me?
Thanks in advance.
Answer:
Run SUSR_SYNC_USER_TABLES and then try tcode SUIM / report RSUSR002. Enter your object in Object 1 and hit enter. The rest is self explanatory.
Tarr
_________________
Try Search
Else SAPNet
Otherwise It was designed not to work.
____________________
Answer:
I have a requirement to get the report by tcode.I wonder whether any one successfully modified the report RSUSR002?
Basically the report needs to show the users attached to a range of Tcodes.I am bit surprised none of the STD reports in SAP provide this information. We are still using 4.0 version .
Answer:
SAP does not store all the data in an accurate form or complete form to give you this information. SU24 can show you what authorizations are configured to be brought into PFCG when a tcode is added to the menu, but is only as accurate as your configuration. Further to handle all the pull-down menus that branch you to other functionality ( some in call tocdes) would require the the report to run for a very long time to potentially yeild you 75 to 85% accurate answers.
I suggest you use SU01 and drill-down on the role or profile to see what the user has.
Also , though SAP has moved somewhat away from this, most tcodes are single threaded and their tcode tells you what they can do but not at the org level.
Example F-43 - Create Vendor Invoice. Create is all it does, it will not let you display invoices or change them directly in the tcode itself ( there is a pull-down that will take you where you can). Another anomoly is in F-43 you can also perform Asset posting, Has nothing to do with Invoices but change the default posting key and doc type and you posting Assest and more.
There are too many variables to give you an exact answer that can be provided in a drill-down to the role from the user.
Answer:
Thank you very much for the detailed answer. I didn't aware of the complexity of the report initially. In fact I modified the report in a copied version by putting select-options and found there was discrepancy in the output between original and modified.
So the bottom line is we can't generate create/modify the report !.