Home

Results 1 to 4 of 4

Thread: Unpack SAP Permissions

Hybrid View

  1. #1
    Join Date
    Jun 2017
    Posts
    21

    Question Unpack SAP Permissions

    I'm in 3.5.1

    Currently, I have the following permission hierarchy:

    Identity I -> SAP Account A -> Activity Group P1 -> TCODE P2.

    If I query Identity I, I can see that it has SAP Account A and Activity Group P1. Similarly if I query SAP Account A I can see that it is mapped to Identity I and it contains permission P1. I cannot see P2 unless I query P1.


    Is there a way to see if Identity I or SAP Account A is mapped to P2 permission?

    In other (hopefully clearer) words: Can I query IG to see which users have which TCODES?

  2. #2
    Join Date
    May 2016
    Posts
    1,716

    Re: Unpack SAP Permissions

    msira,

    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.

    These forums are peer-to-peer, best effort, volunteer run and that if your issue
    is urgent or not getting a response, you might try one of the following options:

    - Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
    all the other self support options and support programs available.
    - Open a service request: https://www.microfocus.com/support
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.microfocus.com)
    - You might consider hiring a local partner to assist you.
    https://www.partnernetprogram.com/pa...nder/find.html

    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.microfocus.com/faq.php

    Sometimes this automatic posting will alert someone that can respond.

    If this is a reply to a duplicate posting or otherwise posted in error, please
    ignore and accept our apologies and rest assured we will issue a stern reprimand
    to our posting bot.

    Good luck!

    Your Micro Focus Forums Team
    http://forums.microfocus.com



  3. #3
    stevewdj is offline Micro Focus Employee - Ultra Contributor
    Join Date
    May 2016
    Posts
    723

    Re: Unpack SAP Permissions

    On 4/17/19 3:06 PM, msira wrote:
    >
    > I'm in 3.5.1
    >
    > Currently, I have the following permission hierarchy:
    >
    > Identity I -> SAP Account A -> Activity Group P1 -> TCODE P2.
    >
    > If I query Identity I, I can see that it has SAP Account A and
    > Activity Group P1. Similarly if I query SAP Account A I can see that it
    > is mapped to Identity I and it contains permission P1. I cannot see P2
    > unless I query P1.
    >
    >
    > Is there a way to see if Identity I or SAP Account A is mapped to P2
    > permission?
    >
    > In other (hopefully clearer) words: Can I query IG to see which users
    > have which TCODES?
    >
    >

    Greetings,
    If you have correctly set-up your Application Collector then when
    you go the Catalog -> Permission -> %Permission Name% you will be able
    to see all Users (Identities) that have the permission



    --
    Sincerely,
    Steven Williams
    Principal Enterprise Architect
    Micro Focus

  4. #4
    Join Date
    Jun 2017
    Posts
    21

    Re: Unpack SAP Permissions

    Quote Originally Posted by stevewdj View Post
    Greetings,
    If you have correctly set-up your Application Collector then when
    you go the Catalog -> Permission -> %Permission Name% you will be able
    to see all Users (Identities) that have the permission
    This is true but only for permissions that have one degree of separation.
    In my case I can see accounts that have a permission SAP_ROLE.
    But I cannot see accounts that have a TCODEs. Where TCODE is a child permission of SAP_ROLE.



    Let me put it into pictures. This is the account SAP_ACCOUNT. I can see that it has (among other permissions) a SAP_ROLE. I cannot see any transactions (also permissions).






    If I click the SAP_ROLE permission I can see that it has the subordinate permission TCODE1.





    But when I click TCODE1, it shows nothing. No users, no parent permission:



    I have redacted the info, but it is taken from an actual SAP System. Not from a CSV.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •