Identify multiple authorizations for transaction codes

In SAP, authorizations are assigned across different hierarchy levels and possibly nested roles. As a result, an effective authorization can be created more than once using different authorization paths. With ARM, you can analyze authorization paths and create the prerequisite for completely removing an authorization.

1. Log in to the Access Rights Manager application.

2. In the Start Home page, enter a transaction code in the Search field. For example, su01.

   

   ARM displays the search results.

   

3. Click the targeted search result.

   ARM automatically expands the tree view of the authorization structure and focuses on the transaction code you are searching for.

   

   The user list automatically displays how many authorization paths (arrows) were set for the transaction code When you click a user, ARM displays the authorization paths.

   

See Identify users assigned to a transaction code for more information.