Skip to content

Authorize Access to Reports via Authorization Groups

The following article shows how to set up access control for reports.

To grant access to a report, an authorization group must be assigned to the report.
Access to the report can then be granted through the S_PROGRAM authorization object, see SAP Note 338177.

Authorizing Access to Specific Reports

  1. Log into SAP and use transaction code SE38 to open the ABAP Editor.
  2. Enter the name of the report you want to access and select Attributes as the Subobjects.
  3. Click [Change]. A window that contains the program attributes opens.
  4. Assign an authorization group.
    report-authorization
  5. Edit or create a user role you want to grant access to (transaction code PFCG).
  6. Manually assign the authorization object S_PROGRAM to the user role.
    report-manual-authorization-object
  7. Select the action SUBMIT in the S_PROGRAM object field P_ACTION.
  8. Assign the same authorization group that is assigned to the report to the S_PROGRAM object field P_GROUP.
  9. Save and generate the authorization.
  10. Assign the user role to users.
Last update: May 8, 2024