SAP Authorization Object Browser
UtilitiesNewBrowse and search SAP authorization objects by module (SD, MM, FI, HR, BC). Find object names, fields, valid values, and the transactions they protect.
Advertisement
About SAP Authorization Object Browser
SAP authorization objects (like S_TCODE or module-specific objects) gate access to transactions and data, but figuring out which object and field values a given transaction actually checks usually means digging through SU24 or asking Basis. This browser lists authorization objects by module with their fields, valid values, and the transactions they protect, so you can plan a PFCG role without a live system.
How to use this tool
- Filter authorization objects by module (SD, MM, FI, HR, BC).
- Search by object name (e.g. S_TCODE) to see its fields and typical valid values.
- Check which transactions the object is known to protect before configuring a PFCG role.
- Cross-reference field values against your organization's authorization concept before granting access.
All processing happens locally in your browser. No data is sent to any server. Your SAP code and business data remain private at all times.
Frequently Asked Questions
What is an SAP authorization object?
An authorization object is a group of up to 10 authorization fields that together protect a business function. When a user runs a transaction, SAP checks the relevant authorization objects against the user's profile (roles). The most basic is S_TCODE, which checks transaction access.
How do I find which authorization object protects a transaction?
Use transaction SU22 (ABAP Authorization Check Proposals) or SU24 to see all authorization objects checked by a specific transaction. In this browser, you can search by module or object name.
What is the difference between an authorization object and a role?
An authorization object defines WHAT can be checked (e.g., company code, activity). A role (PFCG) bundles transactions and authorization object values, defining WHAT a user IS ALLOWED to do. Users are assigned roles, which contain profiles, which contain authorization object values.
Advertisement