SU24 (Table Maintenance: Authorization Check) is used to display and maintain table entries that control the object-dependent authorization check. This tcode is used to manage the authorization objects and related values for a user. Through this tcode, users can find out which authorizations/privileges a user/role has been assigned to and make changes as required. The table contents must then be updated by choosing ‘Maintain’ from the menu or from a related transaction.


On this page, you will find links to SAP Documentation, Wiki & Help Pages, Q&A, similar/related TCodes, Source Tables, and Authorization Objects for SU24.

SAP Help, Wiki, Q&A and other resources for SU24

Click the above link for the full list of resources and help pages, only the first few are posted below

  • Defining the Scope of Authorization Checks - SAP Help Portal

    If you are using the profile generator, you can reduce the scope of the authorization checks (Maintain the Authorization Default Values, transaction SU24).

    https://help.sap.com/docs/SAP_NETWEAVER_740/c6e6d078ab99452db94ed7b3b7bbcccf/52671449439b11d1896f0000e8322d00.html

  • Searching for Deactivated Authority Checks - SAP Help Portal

    Look in table USOBX_C to find the authority checks that have been deactivated in the system by Maintain the Authorization Default Values (transaction SU24)

    https://help.sap.com/docs/SAP_NETWEAVER_740/c6e6d078ab99452db94ed7b3b7bbcccf/9f56153a3e00560de10000000a11402f.html

  • Editing Authorization Default Data (Development System) - SAP Help Portal

    Developers define, in transaction SU22, which authorization objects are required for their application. Transaction SU22 displays a list of authorization objects that the trace has logged for the selected application. Developers need to classify these objects by assigning the authorization default status.

    "Maintaining Authorization Default Values Using Trace Evaluation in Transaction SU22 or SU24"

    https://help.sap.com/docs/SAP_NETWEAVER_731_BW_ABAP/c6e6d078ab99452db94ed7b3b7bbcccf/9c6a76e9725b4b12a11064bd0d083b00.html

  • 8e04dd5321e8424de10000000a174cb4.xml | SAP Help Portal

    Wenn Sie Anforderungen haben, die durch die Verwendung der Berechtigungsobjekte P_ORGINCON und P_ORGXXCON nicht abgebildet werden können (z. B. weil Sie Ihre Berechtigungsprüfungen auf kundeneigene Zusatzfelder des Infotyps Organisatorische Zuordnung (0001) aufbauen möchten) und die ...

    https://help.sap.com/docs/ERP_HCM_SPV/d3bc4479e3344626be836c03a5c6962f/8e04dd5321e8424de10000000a174cb4.html?locale=de-DE&state=PRODUCTION&version=618_HRSP_47

  • Authorization Checks - SAP Help Portal

    To ensure that a user has the relevant authorizations when he or she performs an action, users are subject to authorization checks.

    https://help.sap.com/docs/SAP_NETWEAVER_740/c6e6d078ab99452db94ed7b3b7bbcccf/4ca0ac7a68243b9ee10000000a42189b.html

  •  Preparatory Steps - SAP Help Portal

    When you activate the Profile Generator, you permit specified authorization checks to be deactivated. The Profile Generator is active in the standard system (the system profile parameter auth/no_check_in_some_cases is set).

    "Using Transaction SU25 (step 1), copy the default values delivered by SAP. This is how you import the SAP check indicator default values for the authorization objects within a transaction, and the authorization field values for the Profile Generator into the customer tables (tables USOBX_C and USOBT_C). You can edit these in Transaction SU24."

    https://help.sap.com/docs/SAP_NETWEAVER_740/c6e6d078ab99452db94ed7b3b7bbcccf/52671456439b11d1896f0000e8322d00.html

  • Preparatory Steps | SAP Help Portal

    When you activate the Profile Generator, you permit specified authorization checks to be deactivated. The Profile Generator is active in the standard system (the system profile parameter auth/no_check_in_some_cases is set).

    https://help.sap.com/docs/ABAP_PLATFORM_NEW/c6e6d078ab99452db94ed7b3b7bbcccf/52671456439b11d1896f0000e8322d00.html

  • Editing Templates for General Authorizations - SAP Help Portal

    It does not makes sense to include general authorizations (printing, archiving and so on) in every transaction.

    "You can then maintain these templates from the initial screen of Transaction SU24. Choose Edit templates."

    https://help.sap.com/docs/SAP_NETWEAVER_740/c6e6d078ab99452db94ed7b3b7bbcccf/4f4c6cb9375c3835e10000000a42189d.html

  •  Reducing Authorization Checks in Applications - SAP Help Portal

    You can display the authorization objects associated with each application. You can also exclude any of these authorization objects individually from the authorization check. You should have a thorough knowledge of this application and its context before you start.

    https://help.sap.com/docs/SAP_NETWEAVER_740/c6e6d078ab99452db94ed7b3b7bbcccf/5267147d439b11d1896f0000e8322d00.html

  • Searching for Deactivated Authority Checks | SAP Help Portal

    Look in table USOBX_C to find the authority checks that have been deactivated in the system by Maintain the Authorization Default Values (transaction SU24)

    https://help.sap.com/docs/SAP_NETWEAVER_750/c6e6d078ab99452db94ed7b3b7bbcccf/5267147d439b11d1896f0000e8322d00.html?locale=en-US&state=PRODUCTION&version=7.5.8

  • View the full list of resources, SAP Help/Wiki pages and Q&A for SU24


Related Transaction Codes

TCODE Description Functional Area
PFCG Role Maintenance Basis - ABAP Authorization and Role Management
SU25 Upgrade Tool for Profile Generator Basis - ABAP Authorization and Role Management
SU22 Maintain Authorization Defaults(SAP) Basis - User and Authorization Management
SE93 Maintain Transaction Codes Basis - Workbench Tools: Editors, Painters, Modelers
ST01 System Trace Basis - Low Level Layer

Tables for SAP Transaction Code SU24

TABLE Description Functional Area
USOBT_C Relation Transaction > Auth. Object (Customer) Basis - ABAP Authorization and Role Management
USOBX_C Check Table for Table USOBT_C Basis - ABAP Authorization and Role Management
USOBT Relation transaction > authorization object Basis - ABAP Authorization and Role Management
USOBX Check table for table USOBT Basis - ABAP Authorization and Role Management
TSTCA Values for transaction code authorizations Basis - ABAP Runtime Environment
TSTC SAP Transaction Codes Basis - ABAP Runtime Environment

Authorization Objects for SAP Transaction Code SU24

AUTHORIZATION OBJECT Description Functional Area
S_TCODE Transaction Code Check at Transaction Start
S_TABU_DIS Table Maintenance (via standard tools such as SM30)
S_USER_GRP User Master Maintenance: User Groups
S_DEVELOP ABAP Workbench
P_ORGIN HR: Master Data
S_PROGRAM ABAP: Program Flow Checks

Most searched SAP Basis Components TCodes