Users by Authorization Values

This workflow is called by a number of Audit package workflows to obtain a table of users, profiles and authorization values from the specified SAP system.

The calling workflow passes an SAP system, an input language, a list of input transactions and a set of authorization specifications to the Users by Authorization Values workflow. The Users by Authorization Values workflow then performs the following tasks:

• It calls the Get Transactions workflow to retrieve a list of authorizations that allow the use of the input transactions.

• It calls the Get Authorizations workflow to retrieve a list of authorizations that match the input specifications.

These results are combined to produce two Table datasets. The Qualifying Tcodes dataset stores users from the Authorizations results who are permitted to run the specified transactions. The Qualifying Auths dataset stores users from the Transactions results whose profiles match the authorization specifications.

The Qualifying Tcodes and Qualifying Auths datasets are appended into the OUTPUT - Users, Profiles, Auths, Values dataset, which includes the following columns:

Column	Description
USERNAME	SAP user name.
OBJCT	Authorization object.
PROFILE	User profile.
AUTH	Authorization.
FIELD	Authorization field value.
VON	The authorization’s ‘from’ value.
BIS	The authorization’s ‘to’ value.

The OUTPUT - Users, Profiles, Auths, Values dataset is returned to the calling workflow.