SU53: Authorization Error Analysis

Transaction code SU53 is used to check the most recent authorization failure. User need to execute the transaction SU53 immediately after the failed transaction executed. This is caused whenever a user executes not authorized transaction, it will reflect to transaction SU53 along with the user’s buffer.

The initial screen of transaction SU53 displays the last failed authorization check, the user’s authorizations, and the failed HR authorization check. You can use transaction SU53 from any of your sessions, not just the one in which the error occurred. For example, you selected a function, and the system reported: “You are not authorized to perform this function”. To display the checked authorization object, enter SU53 or /nSU53 in the command field. The system then displays a comparison of the values of the object that are in your user master record.

Note

As the administrator, the data in the Failed Authorization Check area are from the time at which the user started transaction SU53 to determine which authorization he or she is missing. The User’s Authorization Data, on the other hand, is the data that was read directly from the user buffer at the time of analysis, when the administrator views the user’s problem by choosing Display for Other Users.

You May Also Like

Leave a Reply?