SAP ABAP Authorization and Role Management Tables
Are you looking for the right table related to SAP ABAP Authorization and Role Management Tables to query in an ABAP Program, Class, Function Module and OData API?
There are number of standard tables in SAP S/4HANA system. The data of an application is distributed across several database fields. Finding the right table is important, in this post we'll look at list of all the tables in ABAP Authorization and Role Management (BC-SEC-AUT-PFC) module.
Top 10 tables in ABAP Authorization and Role Management
| Table | Description |
|---|---|
| AGR_FAVOS | Personal settings for PFCG |
| AGR_HIERT3 | Role menu texts - SAP Original |
| AGR_HPAGET | Description of the Home Page for a Role |
| AGR_LSD | Role attributes |
| AGRDISTC_FIELD | Role Distribution: Configuration Field Names for Attributes |
| AGR_1016 | Name of the activity group profile |
| AGR_BUFFI2 | Internet links table - Customer version of SAP roles |
| AGRDISTC_LGSYS | Role Distribution: Configuration Logical Systems |
| AGR_HIERT | Role menu texts |
| AGRDISTC_FLATTRT | Role Distribution: Configuration Value Helps for Attributes |
List of tables in ABAP Authorization and Role Management
| Table | Description |
|---|---|
| AGR_FAVOS | Personal settings for PFCG |
| AGR_HIERT3 | Role menu texts - SAP Original |
| AGR_HPAGET | Description of the Home Page for a Role |
| AGR_LSD | Role attributes |
| AGRDISTC_FIELD | Role Distribution: Configuration Field Names for Attributes |
| AGR_1016 | Name of the activity group profile |
| AGR_BUFFI2 | Internet links table - Customer version of SAP roles |
| AGRDISTC_LGSYS | Role Distribution: Configuration Logical Systems |
| AGR_HIERT | Role menu texts |
| AGRDISTC_FLATTRT | Role Distribution: Configuration Value Helps for Attributes |
| SMENCA_DUP | Assign Transaction/Report -> Application Function |
| URL_EXITS | Definition of workplace node types |
| AGR_1250 | Authorization data for the activity group |
| AGR_HIER | Table for Structure Information for Menu |
| USOB_AUTHTRACK | Table for tracking the authvaltrace distribution |
| TPRVORDAT | Templates: Relation Transaction > Auth. Object |
| AGR_1016B | Name of the activity group profile |
| USERVART | User Variable: Texts |
| AGR_BUFFI3 | Internet links table - SAP versions of SAP roles |
| SUAUTHVAL_USMAP | Simulation: User Mapping |
| AGR_FLAGSB | Role attributes |
| AGRDIST_TARGET | Role Distribution: Distribution Steps |
| VAL_AKHT | Permitted Values for the Flat Application Component |
| AGR_ATTS | Role attributes |
| TCODE_MOD | Transaction codes to upgrade the Profile Generator |
| HRP1253 | DB table for infotype 1253 |
| TOBJVORDAT | Field Values for SAP_NEW Authorization Objects |
| AGR_APPL_VARS | Applications and Application Variants in Role Menu |
| USERS_SSM | Allowed menus for the Session Manager |
| HRP1251 | DB table for infotype 1251 |
| AGR_TCDTXT | Assignment of roles to Tcodes |
| USER_CATT | Profile Generator in CATT counter table |
| AGR_OBJ | Assignment of Menu Nodes to Role |
| USOBT_CD | Change History for Field Values |
| MENU_RELE | Release stamp table |
| AGR_HIER_BOR | Table for Object-Oriented Navigation (OBN) |
| AGR_MAPP | MiniApps in Role |
| TCDCOUPLES_S | Check at Call Transaction (Modification Memory) |
| AGR_TIMED | Time Stamp for Role (Profile Comparison, RFC Distribution) |
| USERS_ORG | User settings |
| AGR_HPAGE | Role Home Page |
| USOBX_MOD | Check table for table USOBT |
| TSTC_LOG | SAP transaction codes |
| AGR_1251 | Authorization data for the activity group |
| AGRDISTC_ROLE | Role Distribution: Configuration Roles |
| URBAPILINK | Default BAPI link for central user administration |
| AGR_TIMEB | Time Stamp for Role (Profile Generation) |
| AGR_FLAGS | Role attributes |
| AGRDISTC_FLATTR | Role Distribution: Configuration Value Helps for Attributes |
| MEN_EXITS | Definition of exits for the menu load event |
| TOBJ_TPO | Definition table for global templates |
| TCD_NUMBER | Internal Counter for Assigning of Transactions |
| AGR_INFO | Filter Values from Generation Run |
| TPR_EXCL | Authorization Object Exclusion Table for Generated Roles |
| USOB_TIMESTAMP | Application Time Stamp for Default Data |
| PRGN_CUST | Customizing settings for authorization process |
| TPR_PREF | User's settings |
| TOBJ_TPL | Authorization objects for a global template |
| AGR_MINI | MiniApps in Role |
| USOBT | Relation transaction > authorization object |
| AGRDIST_CONTENT | Role Distribution: Content |
| AGR_MINIT2 | Role mini-application texts |
| USOBX_REV | Contains Incorrect Traces from USOBX |
| TOBJ_OFF | Objects that were disabled |
| AGR_NUM_2 | Internal Counter for Assigning Profile Names |
| URL_TEXTS | Global URL texts |
| URL_EXTXT | Texts for the URL Exits |
| TOBJ_OFF_NEW | Activate/deactivate business objects at application level |
| AGR_HIER2 | Menu structure information - Customer version of SAP roles |
| USOB_CONTAINER | Container Object: Assignment to Referenced Object |
| USOBXFLAGS | Temporary table for storing USOBX/T* changes |
| TOBJ_CD | Objects that were disabled |
| CUS_SYST | Component Systems Integrated with Workplace |
| SUAUTHVALFLDRULE | Rule Field |
| AGR_USERT | Assignment of roles to users |
| USVAR | Possible authorization fields as variables |
| HRT1253 | Table section variants |
| PRGN_SSM | Permitted menus for the Session Manager for role |
| AGR_1252 | Organizational elements for authorizations |
| AGRDIST_HEADER | Role Distribution: Header Data |
| AGR_LOGSYS | Logical system |
| CD1252 | Organizational elements for authorizations |
| TOBJ_TPT | Text table for global templates |
| USOBX_DUP | Modification log for table USOBX. Only for SAP |
| AGR_MARK | Table for report SAPPROFC_NEW |
| AGR_TIMEC | Time Stamp for Role (User Assignment) |
| URL_DEFINE | Definition of global URLs |
| SSM_EX | Value Configuration |
| SU2X_REF_KEYTAB | Reference Key Table for SU2X_COMPUTE_INTV |
| USOBAUTHSTART | Registration of the TADIR Start Authorizations |
| USERS_TMP | Time stamp for user menus |
| USVART | Possible authorization fields as variables |
| USOBTADIRSERVICE | Registration of the TADIR Services (S_SERVICE) |
| AGR_AGRS2 | Role definition |
| USOB_MOD | Applications for Upgrade Profile Generator (TCODE_MOD) |
| TBRG_AUTHT | Texts for Cross-Client Authorization Groups |
| AGR_PROF | Profile name for role |
| SUAUTHVALOBJRULE | Rule Object |
| AGR_1253 | Authorization Data for Activity Group - Static Objects |
| SSM_VAR | Variable Definitions for URLs |
| TOBJ_SAV | Objects that were disabled |
| TPRVORT | Templates Profile Generator: Entity Table |
| TCDCOUPLES | Check on S_TCODE at call transaction |
| AGR_TCODE3 | Assignment of roles to Tcodes |
| USOBX_BACK | Backup Table USOBX for Modified SU25 |
| USOBHASH | Authorization Trace for Services: Hash Values |
| CUS_INDU | Comparison Values for Industry |
| PRGN_CORR | Correction Table for Modif. Transaction Codes in Area Menus |
| USOBX_C | Check Table for Table USOBT_C |
| HRT1251 | Table section fields |
| USOBT_C_BACK | Backup Table USOBT_C for Modified SU25 |
| AGR_HIER3 | Menu structure information - SAP version of SAP roles |
| USORG | Org. levels for profile generator |
| AGR_MINIT | Role mini-appl texts |
| HRP1254 | DB Table for Infotype 1254 |
| PRGN_CORR2 | Correction Table for Modif. Transaction Codes in Area Menus |
| AGR_AGRS | Roles in Composite Roles |
| SU2X_OBJ_STATUS | Temporarily Stored Objects (with Error Code) |
| AGR_DEFINE | Role definition |
| AGR_DATEU | Personal settings for roles |
| PROG_TCD | Transaction Codes for Reports |
| USOBCONTEXTTRC | Context Trace |
| AAF_ROLES | Registration of Single Roles for User Comparison |
| AGR_TIME | Time Stamp for Role (Menu, Profile, Authorizations) |
| USOBX_TSTMP | Local Time Stamp of Last SAP Change (USOBX) |
| HRP1250 | DB table for infotype 1250 |
| USOBX_CD | Change History for Check Indicator |
| AGRDISTC_FIELDT | Role Distribution: Configuration Attribute Texts |
| SSM_SYST | Set workplace values |
| AGR_TCODES | Assignment of roles to Tcodes |
| USOBJEXIT | Individual Maint. Dialog for Authorization Object - Exit FM |
| PRGN_STAT | Session Manager status table |
| AGR_MINI2 | MiniApps in Role |
| USOB_SM | Header Data for SU22 Data |
| HRT1250 | Table section authorizations |
| TPRVOR | Templates Profile Generator: Entity Table |
| CD1016 | Role Profile Name |
| ROLE_INAK | Inactive roles buffer |
| AGR_NUMBER | Internal Counter for Assigning Profile Names |
| SSM_VART | Text and Variable definations for URL |
| USOB_AUTHVALTRC | Authorization Trace Result: Objects and Values |
| AGR_CUSTOM | Role Customizing objects |
| AGR_BUFFI | Internet Links for a Role |
| HRP1252 | DB table for infotype 1252 |
| ROLE_INAKT | Inactive roles buffer |
| PRGN_CORR3 | Correction Table for Modif. Transaction Codes in Area Menus |
| TBRG_AUTH | Cross-Client Authorization Groups |
| SSM_RFC | Variables for RFC Destinations in the Workplace |
| TPRPROF | Profile name for role |
| USERVAR | User variables that can be used in roles |
| CUS_COUNT | Comparison Values for Country |
| USOBT_C | Relation Transaction > Auth. Object (Customer) |
| AGR_SELECT | Assignment of roles to Tcodes |
| TSTC_SM | Control table SU22: Auth.obj.maint. for transactions |
| USRBF3 | User Buffer Content for Fast RFC Logon - New |
| PERS_CLCP | Definition of personalization objects |
| VAL_AKH | Permitted Values for Application Components in Roles |
| HRT1252 | Table section org.levels |
| TBRG_OBJ | Objects with Cross-Client Authorization Groups |
| HRT1254 | Table Part Variable Assignments |
| CD1251 | Authorization Data for Role |
| USOBX | Check table for table USOBT |
| TOBJVOR | SAP_NEW Release-Dependent Data for Authorization Objects |
| DEB_USR | Table for Debugging Information for CUA |
| USOBT_TSTMP | Local Time Stamp of Last SAP Change (USOBT) |
| USOB_FLAGS | Indicators for SU22, SU24, SU25 |
| CUS_AKH | Comparison Values for Application Component |
| USOBT_BACK | Backup Table USOBT for Modified SU25 |
| USOBX_C_BACK | Backup Table USOBX_C for Modified SU25 |
| FAVO_ROLES | Favorites for roles in PFCG |
| USOBAUTHINACTIVE | Start authorization check inactive ('X') or active (SPACE) |
| USOBT_DUP | Modification log for table USOBT. For SAP only |
| USOBRESP | Person Responsible for SU22 Maint.:Non-Transactional Service |
| AGR_USERS | Assignment of roles to users |
| USOB_CONTAINERT | Texts for USOB_CONTAINER |
| TOBJVORFLG | Flags for Authorization Objects |
| AGR_TEXTS | File Structure for Hierarchical Menu - Customer |
| AGR_HIERT2 | Role menu texts - Customer version of SAP objects |