SAP Authorization Object Browser
UtilitiesNewBrowse and search SAP authorization objects by module (SD, MM, FI, HR, BC). Find object names, fields, valid values, and the transactions they protect.
Advertisement
Frequently Asked Questions
What is an SAP authorization object?
An authorization object is a group of up to 10 authorization fields that together protect a business function. When a user runs a transaction, SAP checks the relevant authorization objects against the user's profile (roles). The most basic is S_TCODE, which checks transaction access.
How do I find which authorization object protects a transaction?
Use transaction SU22 (ABAP Authorization Check Proposals) or SU24 to see all authorization objects checked by a specific transaction. In this browser, you can search by module or object name.
What is the difference between an authorization object and a role?
An authorization object defines WHAT can be checked (e.g., company code, activity). A role (PFCG) bundles transactions and authorization object values, defining WHAT a user IS ALLOWED to do. Users are assigned roles, which contain profiles, which contain authorization object values.
Advertisement