Security & GRC
What is Authorization Object?
A definition of up to ten fields, such as activity and company code, checked by programs to permit actions.
Programs call AUTHORITY-CHECK against objects such as F_BKPF_BUK or M_BEST_EKO. Objects are maintained in SU21, and default values per transaction in SU24. A missing authorization shows in SU53.
Related transaction codes
Related terms
PFCG Role
An SAP role created in the profile generator that bundles menus, authorizations, and generated profiles for users.
Authorization Check
The runtime test of whether a user holds an authorization object with required field values.
Authorization Default Values (SU24)
Proposal values defining which authorization objects and values are pulled into roles when a transaction or app is added.
More in Security & GRC
Planning an S/4HANA move?
Read the field guides on testing an ECC to S/4HANA migration and grab the free template library.