RSUSR070: Roles by Complex Selection Criteria

You can use report RSUSR070 to display role data in a client. The report displays profile data for the roles (table UST12). If roles do not have a profile, the authorization data of the role is not analyzed as an alternative. When roles are selected by authorization values, only the profile data of the role is examined.

You can call the report and its variants by choosing the area menu nodes User > Roles by Complex Selection Criteria in transaction code SUIM. The variant Roles by Complex Selection Criteria covers all of the possible selection criteria.

Selection

Standard Selection

• Role
• Role Short Text
  • Description
  • Language Key
• Show Role Long Text
• Single Role
• Composite Role
• Only Obsolete Roles
  • Search for roles that are flagged as obsolete in PFCG

Selection according to user assignments

• All Roles Regardless of User Assignment
  • User assignment is irrelevant.
• Without User Assignment
  • Only single roles that are not assigned to any users are found.
• With Valid Assignment of User(s)
  • The report finds single roles that are assigned to the entered user name. If you do not specify a user name, all single roles that have at least one user assignment are found. By default, the results list is a list of the roles that the report finds. If you want to display a list of the user/role assignments as the results list, select the option Display List of User/Role Assignments.

Selection by Assigned Applications in Menu

• Type of Application:
  • Transaction
  • Web Dynpro Application
    • The Web Dynpro applications defined in PFCG are stored in the tables AGR_HIER and AGR_HIERT. However, the analysis of RSUSR070 is based on the data in table AGR_TCODE, which transaction PFCG does not always write to at the same time as AGR_HIER[T]. If the data from AGR_HIER has not yet been updated in AGR_TCODE, you can remedy this by choosing Update Applications (Ctrl+F1).

Selection by Profiles and Authorization Objects

• Profile Name
• Authorization Object

Selection according to authorization values

• Always Convert Values
  • The selected values are converted in accordance with the conversion exit. SAP Note 667409 defined, for the maintenance of authorizations, that conversion exits are used in general for authorization fields. The indicator “Conversion for authorization fields allowed”, which can be used in the authorization object maintenance tool (transaction SU21), has been ignored since then in the maintenance transactions PFCG and SU03. However, this object-related characteristic is still taken into account in the SUIM reports, meaning that there can be differences between the maintenance transactions and the information system in input field properties for an authorization field. In these cases, search variants entered in the information system do not take into account certain field properties (such as leading zeroes). If this checkbox is selected, the report runs field-related conversion exits even if the conversion is not permitted by the authorization object definition.

• Authorization Object 1 (2, 3, or 4)
  • Authorization objects and their authorization values. After you have entered the authorization field, choose “Input Values” or press [enter] to expand the associated values fields for the possible authorization fields. A maximum of four authorization values can be entered for each authorization field.
  • Full authorization refers only to the authorization that is defined with an asterisk (*) (search pattern ‘#’). Authorizations that contain all possible values for a field are not taken into account for this search criterion.
  • If you enter the search pattern ‘#’, the system finds only the authorizations for which the number of values for a field corresponds to the complete set of all possible values.
  • The search for complete sets of all possible values is restricted to fields that have either fixed values or a check table. For fields with free value specifications, it is not possible to search for the complete set of all possible values.

Selection by Field Name

• Field Name
• Value

Additional Selection Criteria

• Created By/Changed By
• Changed Since/Changed Until

List Format

• Title
  • A title for the result list, which can include parameters
• Layout
  • A variant of the layout for the list output is defined before the report starts.
• Display All Selection Criteria
  • In the default setting, only the first 15 selection criteria are displayed in the list header, for performance reasons. If, however, you want to display all selection criteria, select the checkbox ‘Display All Selection Criteria’. Note that this can result in very long run times or run time timeouts, depending on the number of selected selection criteria.