You can use the report RSUSR_START_APPL to determine whether the applications contained in roles are startable.
Startable applications are all applications that meet the following criteria:
- The roles contain all the required start authorizations for the application. This includes the authorization for the authorization objects S_TCODE, S_SERVICE, S_RFC, and S_START, and also the authorization for the authorization object defined in transaction SE93.
- These required start authorizations are contained in the current profile of the role.
- There is no application start lock (transactions SM01_DEV and SM01_CUS).
The search for the required applications searches the role menu, the authorization data, and the current profile data of the selected roles.
Selection
As well as the standard selection for roles, you can also restrict the search to the following selection criteria.
Selection by Application Type
- Application Type
- You can use the F4 help to select a startable application type in the system. If you leave the field empty, the search looks for all application types in roles.
- Name of Application
- You can either use the F4 help or enter the name of an application to search for in roles.
- Application Text
- You can use the text of an application as an additional search criterion.
Search by User Assignment
- All Roles Regardless of User Assignment
- Without User Assignment
- The search only finds roles that are not assigned to any users.
- With Valid Assignment of User(s)
- The search finds roles that are assigned to the entered user name. If you do not specify a user name, all single roles that have at least one user assignment are found.
- By default, the result list is a list of the roles that the report finds. If you want to display a list of the user/role assignments as the result list, select the option ‘Display List of User/Role Assignments’.
List Formatting
- Title
- A title for the result list, which can include parameters
- Layout
- A variant of the layout for the list output is defined before the report starts.
- Display All Selection Criteria
- In the default setting, only the first 15 selection criteria are displayed in the list header, for performance reasons. If, however, you want to display all selection criteria, select the checkbox ‘Display All Selection Criteria’.
- Note that this can result in long runtimes or runtime timeouts, depending on the number of selected selection criteria.
Output
The output shows the startable applications that were found in roles. As well as information about the selected search criteria, the result list also contains the following information:
- Menu Entry
- Information that the application appears in the menu of the role.
- Application is contained in authorization data
- Information that all above mentioned required start authorizations for the application are contained in the authorization data of the role, and the application is not locked (transactions SM01_DEV and SM01_CUS).
- Profile Status
- The profile status corresponds to the specification on the Authorizations tab in transaction PFCG. This column specifies whether the profile is current.
- Startable (Contained in Profile)
- An application is only marked as “startable” if it is contained in the generated profile with all the above mentioned required start authorizations. Please note that the current generated profile is examined, regardless of the profile status.
- Some authorizations might be missing from obsolete profiles, even if they are contained in the role. Also, obsolete profiles might still contain authorizations that have been removed from the role.
- If there is a full authorization for start authorization objects, this is shown in red in the output list.
