SAP

SAPR/3
R/3Security
SecurityQuick
QuickReference
Reference

General Terms for Security Security Administration Menu Paths

Users: Initial Screen: Tools > Administration
Authorization Object - Lowest level of SAP access. Used to assign access Transaction Code SU01 User Maintenance > Users
values to system elements.
Profiles: Initial Screen: Tools > Administration
Authorization - A set of values for the fields in an authorization object. For a Transaction Code SU02 User Maintenance > Profiles
given authorization object, there can be any number of authorizations. User
authorizations are held in profiles identified in the user master record. Maintain Authorizations: Tools > Administration
Authorization Field - An element of the system that is to be protected by an Transaction Code SU03 User Maintenance > Authorization
access test. Fields are entered in authorization objects and in AUTHORITY-
CHECK calls. For example, common fields include activity, company code and System Message Create: Tools > Administration
authorization groups. Transaction Code SM02 Administration > System Messages

Object Class - Authorization Objects are divided into classes by SAP module. Log of Users on System: Tools > Administration
Transaction Code SM04 Monitoring > System Monitoring
Profile - Second level in security hierarchy. Authorizations are assigned to
User Overview
profiles to create access to specific SAP functionality. Profiles can also be
combined into composite profiles. System Log of Messages: Tools > Administration
Users - Highest level of security hierarchy. Profiles and Composite Profiles are Transaction Code SM21 Monitoring > System Log
assigned to Users for access to perform their jobs.
Printing Controls: Tools > Administration
User Group - The user master records are maintained by the same user security Transaction Code SP01 Spool > Output Controller
administrator. A user master record that is not assigned to a group can be
altered by any user administrator. Control of Batch Jobs: System > Services
Transaction Code SM35 Batch Input > Edit
Administration Module - The Administration module is the main area of use
for the SAP Administrator. It controls Security, Printer (Batch Jobs) and User General Table Display: Tools > ABAP/4 Workbench
monitoring. Transaction Code SE16 Overview > Data Browser
Transaction - A sequence of steps that makes up a logical unit of work. It can
Table Maintenance: System > Services > Table
be made up of one or several screens and will be concluded with a system
Transaction Code SM31 Maintenance
message informing the user of the results.
Transaction Code - A field of four characters identifying a transaction when Control of Background Jobs: System > Services
entered in the command field or when a menu option is selected. For example, Transaction Code SM37 Jobs > Job Overview
SM31 is the code for the Table Maintenance transaction.
Maintenance of Table USOBT: Tools > ABAP/4 Workbench
Naming Convention - The rules defined by an organization for assigning Transaction Code SU22 Development > Other Tools
names to system objects such as programs, profiles, authorizations, etc. Goto > Tcode Assignment
 SAP R/3 Security Quick Reference
Security Administration Menu Paths Basic Function Keys
ABAP Program Development: Tools > ABAP/4 Workbench Save: Click on the folder icon to save
Transaction Code SE38 Development > ABAP/4 Editor
Back One Screen: Click on the green arrow to return back one screen
Maintain Transaction Codes: Tools > ABAP/4 Workbench Enter: Click on the green check mark
Transaction Code SE93 Development > Other Tools >
Possible Entries: Click on the magnifying glass to display possible entries
Transactions
Display: Click on the eye glasses icon to display
Add Authorization Objects: Tools > ABAP/4 Workbench
Help Menu: Click on the question mark to reference the SAP help menu
Transaction Code SU21 Development > Other Tools >
Authorization Objects > Objects Return to the top of SAP: Click on the yellow arrow
Change User Defaults: System > User Profile > User Defaults
Transport Utility: Tools > Administration
Transaction Code SU50
Transaction Code SE01 User Maintenance > Profiles
(use SU02 for version 2.2) Enter Profile Name, and Choose Change User Addressee: System > User Profile > User Addressee
Menu Option Profile > Transport Transaction Code SU51
Customize SAP screen: To Customize the SAP screen click on the
Workbench Organizer Utility: Tools > ABAP/4 Workbench
exclamation point on the left-upper corner on the screen
Transaction Code SE09 Overview > Workbench Organizer
Log Off: Click on the yellow arrow twice or System > Log Off
Display Authorization values Type Transaction Code SU53
for failed Authorization: in the command field at point of
denied Authorization
Table Names: (use SE16 or SM31)
System Trace: Tools > Administration USR01 User Master Records TACT Activities that can be protected
Transaction Code ST01 Monitoring > Traces > System Trace
USR02 User ID and Passwords TSTC Transaction Listing
(use SE30 for version 2.2)
USR10 Authorization Profiles TDDAT Table Authorization Groups
USR11 User Master Profiles & Descriptions TSTCT Transactions with Description
USR12 User Master Authorization Values TOBJ Authorization Objects
Program/Report Names: (use SE38) USR13 Authorizations Descriptions TOBC Auth. Object Classes
RSPARAM Display the system profile parameters USH02 Change History for Log-on Data TOBJT Auth. Objects and Descriptions
RSCLASDU Display list of Client-Independent tables USH04 Change History for Authorizations USR40 Impermissible passwords
RSCLACOP Copy auths, profiles & users between Clients in an instance USH10 Change History for Auth. Profiles TSTCA Values for Tcode Authorizations
RSREGEN Regenerate all ABAP/4 programs
TOBCT Auth. Object Classes & Descriptions USH12 Change History for Auth. Values
RSPROFIL List Profile Directory