Scribd
Upload
63 views5 pages

Running ST01 for Authorization Trace

An authorization trace in SAP allows you to trace the authorization checks of another user by executing transaction ST01. You must be on the same application server as the user being traced. The trace is started by entering the user's login ID, reproducing the error, and stopping the trace. The trace output can then be analyzed to see which authorization objects and fields were checked, and whether any checks failed.

Uploaded by

Madan Mapuskar
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
63 views5 pages

Running ST01 for Authorization Trace

An authorization trace in SAP allows you to trace the authorization checks of another user by executing transaction ST01. You must be on the same application server as the user being traced. The trace is started by entering the user's login ID, reproducing the error, and stopping the trace. The trace output can then be analyzed to see which authorization objects and fields were checked, and whether any checks failed.

Uploaded by

Madan Mapuskar
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

How to run ST01 – Run an Authorization Trace

A trace is very useful for diagnosing difficult security issues.

• You must be on the same application server as the person you are tracing. You can use tcode SM51 to
jump to a different app server
• Execute Transaction ST01
• On the initial screen, click auth check, and then hit the General Filters Button.

• Type in the login id of the person you will trace, then hit the green check box.
• Back on the main screen, hit the Start Trace button.
• Reproduce the error with the login you are tracing. It helps to start the transaction and perform as much
processing as you can before you start the trace.

• IMPORTANT! Next hit the stop trace button.


• Now, hit the Analysis button to review the output of the trace.
Trace Analysis

• On this screen,
o Insure that the user name is set to the login id you are tracing.
o On the right, insure only Authorization Check has been selected
o The From - To is set correctly
o Then hit Execute

See next page


• The area above the red “1” is the authorization object being checked.
• The area above the red “2” are the authorization fields with their current values
• The area above the “3” shows the return code. Zero “0” means the auth check passed. A four “4”
means the auth check failed. You can generally ignore return code of “12”
• The area above the “4” shows a failed auth check.

You might also like