R/3 Security Tcodes

End User

 

Transaction Code	Menu Path	Purpose
SU3	System --> User Profile--> Own Data	Set address/defaults/parameters
SU53	System --> Utilities ­--> Display Authorization Check	Display last authority check that failed
SU56	Tools --> Administration --> Monitor --> User Buffer	Display user buffer

Role Administration 

Transaction Code	Menu Path	Purpose
PFCG	Tools --> Administration --> User Maintenance --> Roles	Maintain roles using the Profile Generator
PFUD	<none>	Compare user master in dialog. This function can also be called in the Profile Generator:   Environment --> Mass compare The Job for user master comparison is: PFCG_TIME_DEPENDENCY (to Release 4.0 RHAUTUP1)
SUPC	Tools --> Administration --> User Maintenance --> Roles --> Environment --> Mass Generation	Mass Generation of Profiles

User Administration 

Transaction Code	Menu Path	Purpose
SU01	Tools --> Administration --> User Maintenance --> Users	Maintain Users
SU01D	Tools --> Administration --> User Maintenance --> Display Users	Display Users
SU10	Tools --> Administration --> User Maintenance --> User Mass Maintenance	User mass maintenance
SU02	Tools --> Administration --> User Maintenance --> Manual Maintenance --> Edit Profiles Manually	Manually create profiles
SU03	Tools --> Administration --> User Maintenance --> Manual Maintenance --> Edit Authorizations Manually	Manually create authorizations

Profile Generator Configuration

 

Transaction Code	Menu Path	Purpose
RZ10	Tools --> CCMS --> Configuration --> Profile Maintenance	Maintain system profile parameters. (auth/no_check_in_some_cases = Y).
SU25	IMG Activity: Enterprise IMG --> Basis Components --> System Administration --> Users and Authorizations --> Maintain authorizations and profiles using  Profile Generator --> Work on SAP check indicators and field values Select: Copy SAP check ID’s and field values	Installation 1. Initial Customer Tables Fill Upgrade 2a. Preparation: Compare with SAP values 2b. Reconcile affected transactions 2c. Roles to be checked 2d. Display changed transaction codes
SU24	Same as for SU25: Select: Change Check Indicators	Maintain Check Indicators Maintain Templates

Transport

Transaction Code	Menu Path	Purpose
SCCL	Tools --> Administration --> Administration --> Client Administration --> Client Copy --> Local Copy	Local client copy (within one system, between different clients)
SCC9	Tools --> Administration --> Administration --> Client Administration --> Client Copy --> Remote  Copy	Remote Client Copy (between clients in different systems) Data exchange over a network (not files).
SCC8	Tools --> Administration --> Administration --> Client Administration --> Client Transport --> Client Export	Client transport (between clients in different systems) Data exchange using a data export at operating system level.
<none>	Tools --> Administration --> User Maintenance --> Roles --> Environment --> Mass Transport	Mass transport of roles
<none>	Tools --> Administration --> User Maintenance --> Roles --> Role --> Upload/Download	Upload/Download of Roles
SU25	Point 3.	Transport of Check indicators
STMS	Tools -->Administration --> Transports --> Transport Management System	Transport Management System

System configuration

Transaction Code	Menu Path	Purpose
RZ10	Tools --> CCMS --> Configuration --> Profile Maintenance	Maintain system profile parameters. (auth/no_check_in_some_cases = Y). .
RZ11		Description of system profile parameters
SM01	Tools --> Administration --> Administration --> Transaction Code Administration	Lock transaction codes from execution

Authorization Object

Transaction Code	Menu Path	Purpose
SU20	Tools --> ABAP Workbench --> Development --> Other Tools --> Authorization Objects --> Fields	List of authorization fields
SU21	Tools --> ABAP Workbench --> Development --> Other Tools --> Authorization Objects --> Objects	List of authorization objects (Initial screen lists by object class)

Audit

Transaction Code	Menu Path	Purpose
SE84	Tools --> Administration --> User Maintenance --> Information System	Information System for SAP R/3 Authorizations
SECR*	<none>	Audit Information System

Table maintenance

Transaction Code	Menu Path	Purpose
SM30 (Tables V_BRG, V_DDAT)	System --> Services --> Table Maintenance --> Extended Table Maintenance	Create table authorization groups (V_BRG) Maintain assignments to tables (V_DDAT)

Table Group

Transaction Code	Menu Path	Purpose
SE43	ABAP Workbench --> Development --> Other Tools --> Area Menus	Maintain (Display) Area Menus