Check SAP tcode authorisation using SU53

Advertisements

The simple way to check sap authorisation and see if you have all the appropriate authorisations for a transaction code, or see which specific authorisations a particular t-code has failed on is to simply execute it. Then use transaction SU53 to see all the failed authorisation checks. 

Advertisements

This is also the standard way of requesting a new SAP authorisation by sending the SU53 result to your basis team. See below for full step by step instructions on how to use SU53. 

Step 1 – Execute transaction

The first thing you need to do is execute the transaction you don’t have authority for or which you want to check. 

Advertisements

For this example I am going to use transaction SU01, so just execute SU01 using the command box. 
 

Advertisements

…and then try and create a new user by entering a user name and pressing the create button. 
 

Advertisements

At this point, you may get the not authorised to use this transaction message. 

Step 2 – Execute SU53

Once you have executed the desired transaction, immediately after it loads or you get the unauthorised message, execute SU53 with either /n or /o to create a new session. 

i.e. /oSU53 
 

You will then be presented with the list of failed authority checks or a message saying all checks were successful. 

Here is an example with failed authorisation check for transaction SM69

sap tcode authorisation check

Advertisements