SAP authorizations: Recommendations for setting up, monitoring and controlling
Controlling file access permissions
When displaying or posting receipts in SAP Finance, are the standard eligibility checks insufficient? Use document validation, BTEs, or BAdIs for additional permission checks. The posting of documents, and often their display, is protected by standard permission checks; but they may not meet your requirements.
Delete invalid SU24 Checkmarks: This function deletes all records that contain an unknown value as a check mark. This is either C (Check) or N (Do Not Check).
Challenges in authorization management
A text file is now created under the appropriate path, containing the desired format with the input parameters. Open the data with Microsoft Excel and set your target value list. To do so, delete the line *ECATTDEFAULT. In the VARIANT column, you can simply use a sequential numbering. Save the file in text format, not in any Excel format.
Roles can be cut so that, for example, they only have display or change permissions. Furthermore, it could be differentiated between customising, master data and movement data maintenance.
Authorizations can also be assigned via "Shortcut for SAP systems".
If the Step user does not have a matching permission, an error message is displayed.
If you want to know more about SAP authorizations, visit the website www.sap-corner.de.
When performing an audit, under Audit Structure, select one of the existing structures and select a check number in the appropriate field.