Big4Guy

In SAP, it is possible to know the accesses and authorizations a user has using T-code SUIM. I was giving a talk on SAP security and controls at a client's place, when this question popped up. This gentleman asked me whether it was possible to view the profiles of users in SAP. The answer is yes. Enter the T-code SUIM in the short path menu. It will take you to the screen below.

This is the user information system menu. There are a number of different options available through which you can select the users. As you can see above, you can select users by Role, by profiles, by User id, by authorization values, by transaction authorizations etc. I generally prefer seraching this menu using "Users by Complex Selection Criteria". Once you click on this, it will take you to the screen below.

Here you can select various options, for example, in the Transaction code field if you select VA01 which is the T-code for creating sales orders, it will give you a listing of all users who hae access to creating a sales order. Similarly, you can also search by User id. If you know a user id and want to know what accesses and authorizations he has, just go to users and enter the id. SAP will give you all accesses the user has. You can drill down futher for details such as profiles attached, authorization objects, activities etc. All in all, I find this feature in SAP very useful for the access and authorizations.

More on Access and Authorization......>>