SU24 SAP TCode - Maintain Authorization Defaults









Edit Assignments of Authorization Objects SAP screen

What is SU24 (Maintain Authorization Defaults) and how is it used? Within an SAP system there are numerous transaction codes (TCode) that each serve different purposes and provide easy access to a variety of different functionality. One such TCode is SU24, which provides access to Maintain Authorization Defaults / Edit Assignments of Authorization Objects SAP screen functionality within R/3 SAP (Or S/4HANA) systems, depending on your version and release level.

Below for your convenience is a few details about this tcode including any standard documentation. In-order to use this transaction within your SAP system simply enter it into the command input box located in the top left hand corner of the SAP GUI, and press enter. You can also add additional command options such /o to trigger in new window..See full list of command options available.

execute SU24 tcode

Program Name: SU2X_MAINTAIN_DEFAULT
Screen Number: 1000

SU24 Authorisation objects

In-order to be able to use a SAP transaction code you need to have the correct authorisations setup for your user ID. To check if you have the required level of authorisation to run this use tcode SU53 via a new session (i.e. /N). Simply execute SU24 and then execute /NSU53 immediately afterwards. A report of all authorisations checked will then be displayed...See check tcode authorisation for full details and screenshots of how to check what authorisations you are missing to use a tcode.

SAP Transaction SU24 usage for Authorization Object Maintenance



SAP Transaction SU24, also known as Authorization Object Maintenance, is used for maintaining and managing authorization default values. It allows administrators to specify default values for authorization objects based on the actual usage of transactions in the system. SU24 helps in simplifying the authorization maintenance process by proposing values for authorization objects, reducing the effort needed for manual configuration.


Authorization Objects and Fields:


SU24 primarily deals with authorization objects and their associated fields in SAP. Authorization objects are components of the SAP security model that define a set of fields related to a specific business process or functionality.

Default Values:


SU24 allows you to specify default values for authorization fields within authorization objects. These default values are used as a basis for automatic proposal of authorizations during the creation or maintenance of user roles.

Automatic Proposal of Authorizations:


When users or administrators are assigning authorizations to roles, SAP provides automatic proposals based on the settings in SU24. The default values defined in SU24 help in the initial assignment of authorizations, streamlining the process and ensuring consistency.

Enhancement Management:


SU24 is closely related to the concept of enhancement management in SAP. It helps in managing authorization-related enhancements by providing default values for newly introduced authorization fields in enhancement packages or custom developments.

Role Maintenance:


During the maintenance of roles in the SAP system, administrators can use SU24 to influence the proposed authorizations for authorization objects. This helps in building more efficient and accurate roles for users.

Integration with SAP Role Maintenance Tools:


SU24 is integrated with SAP role maintenance tools such as the Profile Generator (PFCG). When creating or modifying roles in PFCG, SU24 is consulted to propose default values for authorization fields.

Customization:


Organizations can customize SU24 settings according to their specific business requirements. By doing so, they ensure that the default values proposed during role maintenance align with the security policies and access control needs of the organization.
Simplification of Authorization Maintenance:

SU24 contributes to the simplification of authorization maintenance by automating the initial assignment of authorizations. It reduces manual effort and helps in maintaining consistency across roles.

SAP Transaction SU24 example execution including screenshots



Execute transaction SU24 and enter the t-code you want to check authorization for (i.e. VA02)
su24 step 10



Note some transaction codes like VA02 show the check indicator "do not check" for some objects
su24 step 12



this just means that the object is not checked via this tcode. So why is it in the list?
su24 step 14




Note values like Check indicator and default status can be changed in edit mode using the options at the top
su24 step 16



SAP GUI Support for tcode SU24

When a tcode is created you can select which SAP GUI it has support for from HTML, Java and the main Windows GUI you are probably most familiar with.
GUI for HTML is selected
GUI for Java is selected
GUI for Windows is selected

SAPGUI for HTML
SU24 includes support for the HTML web based GUI. The SAP GUI for HTML generates HTML pages for each screen of the SAP transaction so that it can be executed within a standard web browser. Please note there are technical restrictions and possible incompatibility issues with certain browsers which means some transaction functionality may not function correctly.

SAPGUI for Java
SU24 includes support for the Java based GUI. The SAP GUI for Java support provides more controls than the SAP GUI for HTML, but requires a plug-in to be downloaded and installed on the users PC so is less popular than the SAP GUI for HTML.

SAPGUI for windows
SU24 includes support for the Windows based GUI. Windows(WinGUI) support is the most popular option and transactions can be run under SAP GUI for Windows.



SAP Program associated with transaction SU24

For further details and documentation see program SU2X_MAINTAIN_DEFAULT

SU24 SPRO IMG Menu Path

Tools->Administration->User Maintenance->Information System->Change Documents->For Authorization Defaults(SU24)



Search for further information about these or an SAP related objects



Comments on this SAP object

What made you want to lookup this SAP object? Please tell us what you were looking for and anything you would like to be included on this page!