What are authorization objects in SAP?

An authorization object consists of up to 10 authorization fields. Combinations of authorization fields, which represent data and activities, are used to grant and check authorizations. Authorization objects are grouped together in authorization object classes. They are edited in transaction SU21.

How do I create an authorization object for a program in SAP?

You can create authorization fields under Tools >>ABAP Workbench >>Development >>Other tools>> Authorization objects>>Objects (transaction SU21). You can also create authorization objects in the Object Navigator (transaction SE80). >>ID ‘CUSTTYPE’ FIELD ‘B’.

How do you maintain an authorization object in SAP?

Step 1: – Enter transaction code “SU21” in the SAP command field and press enter. Step 2: – It is mandatory to create object class and later we are going assign to authorization objects. On maintain authorization object screen, click on create button and then select object class.

How do you maintain authorization of objects?

For customizaing tcodes required authorization object can be maintained in SU24, and s_tcode for that new tcode need not to be maintained as it will be mainatained automatically once the tcode gets created.

How many fields can one authorization object have?

10 fields
Authorization objects are composed of a grouping of fields. The values in these fields will be used in authorization check. There can be a maximum of 10 fields defind on an authorization object.

How do I view an authorization object in SAP?

Please follow the below steps in order to find Authorization Object for T-code:

  1. Navigate to SE16 –> UST12.
  2. Enter object as S_TCODE.
  3. Value in VON –> enter tcode (for eg: VA03) Remember to enter tcode in uppercase only.
  4. Execute.

How many authorization objects can be assigned to a role in SAP?

Ans. In a role, the maximum number of profiles is 312 and the maximum number of objects is 170.

What is the difference between Tcode and authorization object in SAP?

One or more fields are part of an Authorization Object at one level above this level. Level above an Authorization Object will be a tcode. A tcode can have multiple Authorization Objects. In other words, multiple fields with their defined values are bundled with its Authorization Object.