U.09 - User Tcode Usage Analysis

This workflow generates a report that identifies where SAP’s security provisioning makes available more functionality than a user has actually used, according to the available performance history data on the specified SAP system. The results are stored in a Dashboard report that provides data for the Upgrade Analysis Dashboard report.

Creating RFC Destinations

Before you begin, you will need to create RFC Destinations for each of the SAP systems you wish to compare, and for the system from which to retrieve performance history data.

In the LiveCompare hierarchy, select the RFC Destination from which to retrieve performance history data, and click the PHD tab. Enter a value (n) in the ‘Keep this many months of data:’ field, and click ‘Update Data’ to download the most recent <n> months of performance history data. You may also specify a schedule so that the available performance history data is downloaded at regular intervals. See the Retrieving Performance History Data help topic for details.

Preparing the Workflow

To prepare the U.09 - User Tcode Usage Analysis workflow, drag its workflow template from the Templates folder into your own workspace, and modify the workflow as follows:

To specify the Current or As-Is system:

  1. Select the System 1 parameter and choose ‘Edit RFC Destination’ from its context menu to display the RFC Destination dialog.

  2. Select the RFC Destination for the system to analyze, then click ‘Save’.

To specify the system from which to retrieve performance history data:

  1. Select the System 3 parameter and choose ‘Edit RFC Destination’ from its context menu to display the RFC Destination dialog.

  2. Select the appropriate RFC Destination, then click ‘Save’.

To include or exclude SAP roles from the analysis results:

  1. Select the Include or Exclude Role Ranges parameter and choose ‘Edit String List’ from its context menu to display the String List Editor dialog.

  2. Edit the supplied SQL to specify which role names should be included or excluded. Role names are specified in the Source1 table’s AGR_NAME column.

Save the workflow using the ‘Save’ toolbar button.

Running the Workflow

To run the U.09 - User Tcode Usage Analysis workflow, click the 'Run' toolbar button, choose ‘Run Now’ from the diagram’s context menu, or press F5. The currently running workflow action is marked with an animated display. When the workflow execution has completed, select the Report URL dataset and choose ‘View Details’ from the context menu to display the associated Dashboard report. This URL is returned to the Run Complete Analysis workflow, and provides data for the Upgrade Analysis Dashboard report.

Dashboard Report

The Dashboard report generated by U.09 - User Tcode Analysis workflow includes a line chart named Usage Profile, which plots the percentage of authorized transactions executed by each user. This value is calculated as:

Number of used transactions / Number of authorized transactions * 100

The report also includes panels that display the minimum, average and maximum usage profile values.

Additional Resources

The Additional Resources section of the Dashboard report includes links to the following reports:

U.09 - User Tcode Usage Analysis Details

This Excel report includes the following spreadsheets:

SummaryStatsByUser

This spreadsheet lists the number of transactions each user is authorized to run, the number of transactions they have run according to the available performance history data, and the number of authorized transactions they have run expressed as a percentage.

AccountsToRoles

This spreadsheet lists user accounts and the roles assigned to them. The spreadsheet is sorted by role name.

AccountsToTcodes

This spreadsheet lists user accounts and the transactions they have used according to the available performance history data. The spreadsheet is sorted by transaction code.

AccountsWithUnusedRoles

This spreadsheet lists user accounts with roles that have not been used according to the available performance history data. The spreadsheet is sorted by role name.

RolesToTcodes

This spreadsheet lists roles and their associated transaction codes. The spreadsheet is sorted by role name.

Analysis Input Data

This Excel report contains a copy of the input parameters used to produce the App’s Dashboard report. The value of each input parameter is stored in a separate worksheet, which is named after the parameter whose value it contains.