Technical Articles
Automate your SAP Transaction Code Authorization Approval Process using Simple Workflow
Introduction
In every Project you have worked or will work you will get this Error Message.
“You are not Authorized to use this Transaction Code”
General procedure after that if you have worked with SAP before, you will take a SU53 Transaction Code dump and send it to SAP Security Team or you create a Ticket/Request in your Requesting System.
If you do not know you bug the IT Department and they will tell you to do the above. For a long time I thought this thing need to stop. The solution below can help you to solve this issue by the most Sophisticated Technology SAP had and still has which is SAP Workflow. I am bragging about it as I am a SAP Workflow Consultant trying to learn little by little:)
Solution
First Login to SAP System.
In this Example I am using a Transaction Code
/IWNGW/BEP_DEMO
for which I am not Authorized as mentioned below.
Click on Help
Now click on Technical Information as mentioned below
Note down the Message Class and ID
Go To Transaction Code SWUY
Select Start
Provide the Area as Message Class and Message as Message Id we got from the Authorization Error.
After this Hit Continue
Click Complete
Workflow is generated and you give some meaningful information to Identify the Workflow Template. Please Save it
Now Click Workflow Builder
Right Click as mentioned below and Hit Create
Select Decision Task as mentioned below.
Provide the below Information as mentioned
Now Press Activate to Activate the Workflow.
Now is Testing Time.
Execute same Transaction code.
You get the Error message and now you hit Help Button.
Now click on Workflow Icon
This Triggers our Workflow Approval. Ideally you will have different Role/User who will Approve the Different Transaction Codes.
Conclusion
This can be used in both SAP ECC and SAP S/4HANA
Below is the Video version
Awesome ?. Need to asses it for auth objects. Have you deal with it?
I think you can code it inside the Workflow template since it is custom and you can code it however you want it to behave.
If required the initiator can attach the SU53 Dump also but I think the SAP Security team can check SU53 for other users also or it can be coded to get all those details
Thanks
Arghadip
So is it a parallel way to authorize users for the activity they want to perform where the workflow approvers approve the actiok to be done where users get auth error
Yes that is true and this completely Auditable as it has Workflow associated with it. I will create a separate blog for missing config data based on this concept.
Thanks
Arghadip
Will the workflow send an item to the approver's SAP inbox? Also when the approver approves it, what happens? Does the user get a message in his SAP inbox that the authorization has been approved? If yes, where does the assignment of authorization happen?
Sky is the Limit. You can do whatever you want inside the Workflow. The user can get exactly the same notification which he gets for other Workflow item.
Hello,
So do you have to do this for each tcode ( or at least each which has a different message class - which is usually different between todes) a user might not have access to? Not sure if that is very efficient then?
This Message class is Generic and is used everywhere. There might be some difference but that should be good.
You can search this message in t100 table
Hi,
Thank you so much for the post.
I have implemented the same and I am new to workflow. This is my first workflow creation.
At first I got binding and container issues. Resolved by creating new task with BOR object category, Decision object type and assigning to the user decision step. On execute of the workflow, I got workflow initiated message but I didn't get the decision options screens/ approval screen.
Could you help me how to achieve the screen?
Best Regards,
Sangameshwari.