Mass user creation and maintenance using SU10 in SAP Security

To set up single user in SAP we can use SU01 . To set up number of users or update users access we cannot do by using SU01 . it is time consuming.

we can do it by using SU10, LSMW ,SECAT .
now will discuss about SU10 .
Using SU10  can create ,change ,delete ,lock, unlock the users. but we cant maintain user address data.
 steps :

 

here copy the user ids under user tab. if you have more than 20 user ids then select Authorization data.

1. click Authorization data  

  

2. once selecting the Authorization data ,it will prompt users by complex selection criteria screen as below . here select multiple option in users tab

 copy the user ids in users tab and click on execute.

 3.select all the users and click on APPLY / TRANSFER option . then all users will be copied into SU10 .

4.now you can create or maintain all users access in a single shot.

we can maintain users data using SU10 as  above mentioned.

SQVI Report - join two or more tables in SAP Security

Here I am explaining about SQVI to create report.

By using SQVI will get one report by joining multiple tables.

For example if you want to extract the data of users with roles details you can do it by AGR_AGRS and AGR_USERS.  To get this report we can combine both tables in SQVI in a single shot.

T-code: SQVI

Steps:

•  Go to SQVI and Enter name in Quick View field. And then click on create.

 

•  Enter Title like description and then select data source filed as Table join.

           Here  options will be available in Data source filed like Table, Table Join , Logical database,     SAP Query info set

• Next you can select basis mode or layout Mode and click on continue. For best result select Layout mode and click on continue.

•  new window pop up as per below. here select insert button

 

•  Enter Table name in filed and click continue button.

•  Again click on insert filed and enter tables as you wish to join the tables. 

We can add multiple tables , once completed the adding of tables then select back button . 

• Now extract the tables which are in left side as per below. 
  

Select the check box filed which ever you want in output.

selection fields means in selection screen what fields required , these fields  are display in input selection screen

list fields means out put format.

• Click on execute. Will get new window.
• Select SAP list viewer and click on execute.

 

 

 extract the report using    option.

the same way we can join more than two tables to get reports ....

Authorization object creation and maintain in SAP Security

To create authorization object in SU21 need following technical details.

• Authorization class
• Developer access key 
• Relevant package name 

Authorization Object can contains 10 chars only.

 steps to create Authorization Object.

 1. Go to SU21.

 2.  select Authorization object 

 

3. in new screen enter Authorization object which you want to create and maintain the details as per below then click on continue option.

 4. it will take you to next screen . here select permitted Activities and update activities and click on save.

Here once click on continue option it will ask to enter developer access key. if you dont ahve access  key you will get below message.

 get the developer access key ans enter in above filed. 

5.now new window will prompt to enter package name as per below.

 6.now you can maintain activities for object.

 7.update and click on save.here it will ask you create transport request . complete TR creation and save. 

  

Authorization object creation done. 

Now contact ABAP developers to maintain Authority check for this object in program.