Find Roles and Users by Transaction Code

Jimbo's picture
Submitted by Jimbo on Mon, 01/21/2019 - 15:05

Fenced goatIn any SAP implementation, the need to use a transaction to which nobody on the team has permission will arise. That is when two little-known tables can be very useful to the data migration professional.

The AGR_1251 table

Approaching the security team doling out permissions to a TCODE in a production SAP server can be a bureaucratic nightmare as the first question is always "What role do you need?" The people doing this job understand perfectly that users have no idea what roles have access to the transaction they need, but they're going to ask the question as though it is perfectly natural for users to have this esoteric knowledge.

The good news is that anyone with access to SE16 (or SE16N) can find roles with access to a TCODE by searching in the AGR_1251 table. Type the desired TCODE in all upper case (it is case-sensitive) into the LOW field and the system will list all of the roles with access to that transaction.

The AGR_USERS table

There is a good chance that somebody on the data migration team knows somebody in the organization who already has access to the required transaction, and when the requirement arises during a go-live weekend, finding that person might mean the difference between going live on Monday and failure. The names of everybody assigned to the roles found in AGR_1251 is in AGR_USERS.

To find the users with these roles in SE16, paste the roles into the AGR_NAME field and search. The UNAME field contains a list of all the users who have the roles with access to the required transaction.