Big4Guy

SAP R3 is a critical system in any organization. Access to SAP R/3 administrative functions needs to be controlled to ensure that there is adequate access restriction. What is required in SAP R/3 is an authorization model that regulates which user IDs are assigned authorization to table maintenance. Different authorization objects in SAP provide different authorization rights. You can find a detailed post on authorization objects here.

To take an example, the authorization object S_TABU_CLI controls authorization for maintaining cross-client tables. SAP R/3 already comes pre-delivered with authorization groups which are assigned to tables. Such existing authorization groups are stored in the table TBRG. For further customization, SAP system administrators can also create and assign their own authorization groups for table maintenance. Such new authorization groups created get stored in the Table TDDAT. SAP administrators should remember that to maintain tables, one needs to have authorizations for Table maintenance group and Table maintenance activity. This is in addition to global authorization for client-independent tables.

Related Posts

Correction and Transport System in SAP
SAP FICO Audit Steps
SAP R3 Implementation Timeline
SAP xApps Beginners Guide