{"id":66856,"date":"2026-08-07T11:53:10","date_gmt":"2026-08-07T09:53:10","guid":{"rendered":"https:\/\/xiting.com\/?post_type=sap-knowledge&#038;p=66856"},"modified":"2026-08-26T14:58:15","modified_gmt":"2026-08-26T12:58:15","slug":"sap-authorization-trace","status":"publish","type":"sap-knowledge","link":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/","title":{"rendered":"SAP Authorization Trace \u2013 Transaction STUSOBTRACE"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"66856\" class=\"elementor elementor-66856 elementor-62827\" data-elementor-post-type=\"sap-knowledge\">\n\t\t\t\t<div class=\"elementor-element elementor-element-124069d9 e-flex e-con-boxed e-con e-parent\" data-id=\"124069d9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-4aed3e67 elementor-hidden-mobile e-flex e-con-boxed e-con e-child\" data-id=\"4aed3e67\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5313bc75 elementor-widget-mobile__width-initial elementor-widget elementor-widget-button\" data-id=\"5313bc75\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"https:\/\/xiting.com\/de\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-home\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-59c71927 elementor-widget elementor-widget-text-editor\" data-id=\"59c71927\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\/<\/p><br>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d35e90a elementor-widget-mobile__width-initial elementor-widget elementor-widget-button\" data-id=\"d35e90a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">SAP Knowledge<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-24a5b110 elementor-widget elementor-widget-text-editor\" data-id=\"24a5b110\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\/<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ad7ace elementor-widget-mobile__width-initial elementor-widget elementor-widget-button\" data-id=\"8ad7ace\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">SAP Authorizations<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5dc77192 elementor-widget elementor-widget-text-editor\" data-id=\"5dc77192\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\/<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6201955b elementor-widget-mobile__width-initial elementor-widget elementor-widget-button\" data-id=\"6201955b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorization-trace\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Authorization Trace<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-48981838 animated-fast e-con-full e-flex elementor-invisible e-con e-child\" data-id=\"48981838\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;animation&quot;:&quot;fadeInUp&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dbda6 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"dbda6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">SAP Authorization Trace \u2013 Transaction STUSOBTRACE <\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-6ca1aabd e-con-full e-flex e-con e-child\" data-id=\"6ca1aabd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-209c50e0 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"209c50e0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"far fa-calendar-alt\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">August 7, 2026<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-28ef5d2e elementor-widget__width-auto elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"28ef5d2e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-equals\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Authorization Management<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ca01f88 elementor-widget__width-auto elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"3ca01f88\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"far fa-user\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Nicole Wolderling<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7dfcdce4 e-con-full e-flex e-con e-child\" data-id=\"7dfcdce4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-414d0f3c elementor-widget elementor-widget-text-editor\" data-id=\"414d0f3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">The SAP authorization trace is a valuable tool for analyzing authorization checks and\u00a0maintaining\u00a0authorization default values in SU24. Unlike the shorter-term system trace using\u00a0transactions\u00a0STAUTHTRACE and ST01, the authorization trace is a system-wide, long-term trace. The data collected by the trace can be evaluated using transaction STUSOBTRACE.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">In this article,\u00a0you&#8217;ll\u00a0learn everything about the value of the authorization trace, what preparations you should make before starting it, and how to get the most out of evaluating the trace results.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-55edbf38 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"55edbf38\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What is the SAP Authorization Trace and why do I need it? <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f075665 elementor-widget elementor-widget-text-editor\" data-id=\"2f075665\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">The SAP authorization trace is a cross-client, cross-instance, long-term trace in SAP. Its main purpose is to log and evaluate authorization checks and their values. With the associated transaction STUSOBTRACE, you can evaluate the collected data in a structured way.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Authorization proposals are the linchpin of proper role building. They form the foundation of your\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-concepts\/\"><span data-contrast=\"none\">authorization concept<\/span><\/a><span data-contrast=\"auto\">, whether\u00a0you&#8217;re\u00a0still on SAP ECC or already on\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-s4hana\/\"><span data-contrast=\"none\">SAP S\/4HANA<\/span><\/a><span data-contrast=\"auto\">\u00a0with, for example,\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-fiori\/\"><span data-contrast=\"none\">SAP Fiori<\/span><\/a><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-433dd747 e-con-full e-flex e-con e-child\" data-id=\"433dd747\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-19c1ccff elementor-widget elementor-widget-text-editor\" data-id=\"19c1ccff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Info: Switching from SAP ECC to SAP S\/4HANA\u00a0<\/strong><\/p><p><span data-contrast=\"auto\">SAP S\/4HANA, introduced in 2015, is the successor to SAP ERP 6.0 (also known as SAP ECC). SAP has announced that customers using SAP ERP 6.0 must migrate to SAP S\/4HANA by december of 2027, although individual deadlines may vary depending on their support agreements and circumstances.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">That makes migrating to\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-s4hana\/\"><span data-contrast=\"none\">SAP S\/4HANA<\/span><\/a><span data-contrast=\"auto\">\u00a0unavoidable if you want to keep using SAP to support your company&#8217;s growth.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65f96192 hs-popup-btn elementor-widget elementor-widget-button\" data-id=\"65f96192\" data-element_type=\"widget\" data-e-type=\"widget\" data-portal=\"25088517\" data-form=\"ff252bfb-c4f8-4db5-8993-e6ecb87579a0\" data-region=\"eu1\" data-title=\"Kontaktieren Sie unsere Experten.\" data-success-close=\"1500\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/xiting.com\/en\/contact\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Request free Consulting now!<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4ebb6266 elementor-widget elementor-widget-text-editor\" data-id=\"4ebb6266\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW245614456 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW245614456 BCX8\">Analysis via the authorization trace is possible for all menu objects, such as transactions, <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/rfc-interfaces\/\">RFC<\/a> function modules, OData services, and more, and using these authorization default values\u00a0<\/span><span class=\"NormalTextRun SCXW245614456 BCX8\">greatly simplifies<\/span><span class=\"NormalTextRun SCXW245614456 BCX8\">\u00a0the effort involved in role maintenance.<\/span><\/span><span class=\"EOP Selected SCXW245614456 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6956849 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"6956849\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Necessary System Settings for Starting the Authorization Trace <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-28bf6f83 elementor-widget elementor-widget-text-editor\" data-id=\"28bf6f83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">Before you can start\u00a0maintaining\u00a0your authorization default values via the authorization trace, you first need to activate the required profile parameter.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">\u00a0Figure 1 illustrates how to temporarily change the required profile parameter\u00a0<\/span><span data-contrast=\"auto\">auth\/authorization_trace\u00a0using transaction\u00a0RZ11. Setting the parameter to\u00a0&#8220;F&#8221;\u00a0activates the Authorization Trace.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">However, the trace first needs to be restricted to a specific scenario using\u00a0an appropriate filter\u00a0in transaction STUSOBTRACE (for example, execution by user X or by authorization object) before data is collected. There are also the options \u201cY\u201d (activate trace) and \u201cN\u201d (deactivate trace).<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17ba4ffc elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"17ba4ffc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/1.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig.1 SAP Display Profile Parameter Details for Auth\/Authorization_Trace\" data-elementor-lightbox-description=\"SAP screen displaying metadata for the profile parameter auth\/authorization_trace, including type, parameter group, and value hierarchy\nCaption: Displaying the metadata and value hierarchy for the profile parameter\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NTcsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvMS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1901\" height=\"991\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/1.png\" class=\"attachment-full size-full wp-image-67657\" alt=\"SAP screen displaying metadata for the profile parameter auth\/authorization_trace, including type, parameter group, and value hierarchy Caption: Displaying the metadata and value hierarchy for the profile parameter\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/1.png 1901w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/1-300x156.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/1-1024x534.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/1-768x400.png 768w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/1-1536x801.png 1536w\" sizes=\"(max-width: 1901px) 100vw, 1901px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 1 \u2013 Setting the profile parameter auth\/authorization_trace<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32987d9b elementor-widget elementor-widget-text-editor\" data-id=\"32987d9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-ccp-props=\"{&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559739&quot;:200}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Note that when the authorization trace is activated with a filter, only up to 5 users or\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorization-objects\/\"><span data-contrast=\"none\">authorization objects<\/span><\/a><span data-contrast=\"auto\">\u00a0can be filtered. We recommend running this trace with a filter to prevent potential performance issues. It also\u00a0shouldn&#8217;t\u00a0run continuously, but only during predefined test periods.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-62f1d921 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"62f1d921\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The Authorization Trace at a Glance <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-752e1579 elementor-widget elementor-widget-text-editor\" data-id=\"752e1579\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">The data collected by the long-term trace is stored in the database\u00a0table\u00a0USOB_AUTHVALTRC. Since this is a database table rather than a system file, the data is not overwritten using a ring-buffer mechanism.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">It&#8217;s\u00a0worth noting that, per authorization check, the trace collects data for one application at a time. In other words, this\u00a0doesn&#8217;t\u00a0produce a user-specific evaluation; instead, the focus is on the application itself. That makes sense here, since\u00a0you&#8217;re\u00a0using this tool to\u00a0maintain\u00a0your authorization default values and check indicators, not authorization data for roles and end users (more on that in the article on the<a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/management-with-su01\/\"> SAP user<\/a> trace via STUSERTRACE).<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-686dc518 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"686dc518\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Displaying the SAP Authorization Trace <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7a35eef1 elementor-widget elementor-widget-text-editor\" data-id=\"7a35eef1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>The way authorization trace results are displayed is\u00a0similar to\u00a0the system trace. Here, too, you can:\u00a0<\/strong><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">delete specific records<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">jump to the source code<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">view information and documentation for specific <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorization-objects\/\">authorization objects<\/a><\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">jump to CDS access control, or<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"auto\">further process or save the data using the upload and download functions (Figure 2)<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7395f9b0 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"7395f9b0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/2.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig. 2 SAP Authorization Trace \u2013 Table USOB_AUTHVALTRC Results\" data-elementor-lightbox-description=\"Viewing eight recorded hits in the authorization trace table USOB_AUTHVALTRC.\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NjEsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvMi5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1481\" height=\"455\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/2.png\" class=\"attachment-full size-full wp-image-67661\" alt=\"SAP authorization trace table USOB_AUTHVALTRC showing eight hits with transaction types, application names, and authorization objects\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/2.png 1481w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/2-300x92.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/2-1024x315.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/2-768x236.png 768w\" sizes=\"(max-width: 1481px) 100vw, 1481px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 2 \u2013 Result display of the authorization trace<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d453b7 elementor-widget elementor-widget-text-editor\" data-id=\"9d453b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">Unlike the system trace,\u00a0\u00a0this trace\u00a0doesn&#8217;t\u00a0include\u00a0return codes. The simple reason is that this information\u00a0isn&#8217;t\u00a0needed,\u00a0since\u00a0you&#8217;re\u00a0maintaining\u00a0the data in\u00a0transaction SU24 per application.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7e3bf0ee e-con-full e-flex e-con e-child\" data-id=\"7e3bf0ee\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-406d6c2d elementor-widget elementor-widget-text-editor\" data-id=\"406d6c2d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Note:\u00a0<\/strong><\/p><p><span data-contrast=\"auto\">Not all the values listed here need to be\u00a0maintained, since not every <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/\">authorization<\/a> check is inherently meaningful or necessary for successfully calling a transaction. You\u00a0don&#8217;t\u00a0necessarily need to\u00a0maintain\u00a0this so-called \u201cbackground noise\u201d within transaction SU24. This can save you valuable time.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6db23f30 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"6db23f30\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Maintaining Authorization Default Values via Transaction STUSOBTRACE \u2013 Practical Example in 4 Steps <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-127db3f7 elementor-widget elementor-widget-text-editor\" data-id=\"127db3f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"TextRun SCXW177386420 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW177386420 BCX8\">To show you how to use the authorization trace via transaction STUSOBTRACE and what it can do,\u00a0<\/span><span class=\"NormalTextRun SCXW177386420 BCX8\">we&#8217;ll<\/span><span class=\"NormalTextRun SCXW177386420 BCX8\">\u00a0walk you through a common use case.<\/span><\/span><span class=\"EOP Selected SCXW177386420 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d67c45d elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"d67c45d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Starting Situation <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39dc92de elementor-widget elementor-widget-text-editor\" data-id=\"39dc92de\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">\u00a0Xiting&#8217;s\u00a0internal security officer needs to\u00a0maintain\u00a0or update the list of forbidden passwords for the SAP system. For <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\">security<\/a> reasons, they should not\u00a0have\u00a0full\u00a0access to all SAP tables through transactions<\/span><b><span data-contrast=\"auto\">\u00a0<\/span><\/b><span data-contrast=\"auto\">SE16\u00a0or\u00a0SM30. Instead, their access should be limited to table\u00a0USR40, with authorization to display and\u00a0maintain\u00a0only that specific table.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Therefore it\u00b4s\u00a0up\u00a0to the system or authorization administrators to create a new function in the form of a suitable parameter\u00a0transaction, and\u00a0then\u00a0maintain\u00a0the necessary\u00a0authorization values in transaction SU24 for this new transaction code.\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p><p><strong>The administrator uses the authorization trace for this as follows:\u00a0<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-429a016 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"429a016\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">1. Starting the SAP Authorization Trace <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69905e78 elementor-widget elementor-widget-text-editor\" data-id=\"69905e78\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"NormalTextRun SCXW124820359 BCX8\">First, the administrator (XITING) activates the profile parameter auth\/<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW124820359 BCX8\">authorization_trace<\/span><span class=\"NormalTextRun SCXW124820359 BCX8\">\u00a0with the value \u201cF\u201d on the target system, so the authorization trace is switched on with a filter. They then set the filter in transaction STUSOBTRACE for the test user (X_FI) and set the application type to \u201ctransaction\u201d (Figure 3).<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3bcf45ed elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"3bcf45ed\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/3.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig. 3 SAP Evaluate Authorization Trace \u2013 Active Filter Settings\" data-elementor-lightbox-description=\"Reviewing the active authorization trace filtered by transaction type and user X_FI.\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NjMsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvMy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1338\" height=\"499\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/3.png\" class=\"attachment-full size-full wp-image-67663\" alt=\"SAP evaluate authorization trace screen showing an active trace filtered by application type transaction and user X_FI\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/3.png 1338w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/3-300x112.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/3-1024x382.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/3-768x286.png 768w\" sizes=\"(max-width: 1338px) 100vw, 1338px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 3 \u2013 Person-specific authorization trace for transactions<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e4106d3 elementor-widget elementor-widget-text-editor\" data-id=\"6e4106d3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW215711233 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW215711233 BCX8\">This means the authorization trace only collects the relevant application data for transactions run by user X_FI.<\/span><\/span><span class=\"EOP Selected SCXW215711233 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3e93b4f3 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"3e93b4f3\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\"> \n\n2. Running the SAP Authorization Trace with a Test User <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2a67ec2e elementor-widget elementor-widget-text-editor\" data-id=\"2a67ec2e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW219628473 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW219628473 BCX8\">Using the test user, they now run the new parameter transaction ZSM30_PASSWORDS. This takes the user directly via transaction SM30 into table USR40, without being able to access the\u00a0<\/span><span class=\"NormalTextRun SCXW219628473 BCX8\">initial<\/span><span class=\"NormalTextRun SCXW219628473 BCX8\">\u00a0maintenance screen of transaction SM30 in any way. They can now\u00a0<\/span><span class=\"NormalTextRun SCXW219628473 BCX8\">maintain<\/span><span class=\"NormalTextRun SCXW219628473 BCX8\">\u00a0a few test entries to simulate everyday work as closely as\u00a0<\/span><span class=\"NormalTextRun SCXW219628473 BCX8\">possible and<\/span><span class=\"NormalTextRun SCXW219628473 BCX8\">\u00a0then end the test activity.<\/span><\/span><span class=\"EOP Selected SCXW219628473 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d32fdd3 e-con-full e-flex e-con e-child\" data-id=\"d32fdd3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5873f1fc elementor-widget elementor-widget-text-editor\" data-id=\"5873f1fc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Info: SAP Authorization Trace on Production Systems\u00a0<\/strong><\/p><p><span data-contrast=\"auto\">A sensible approach for\u00a0maintaining\u00a0authorization default values is also to switch on the authorization trace in the production system (PRD) and let it collect the\u00a0\u00a0business-relevant data for specific applications, especially custom developments. You can then evaluate that data and\u00a0maintain\u00a0it sensibly for specific applications based on everyday business use.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65ca4d05 hs-popup-btn elementor-widget elementor-widget-button\" data-id=\"65ca4d05\" data-element_type=\"widget\" data-e-type=\"widget\" data-portal=\"25088517\" data-form=\"ff252bfb-c4f8-4db5-8993-e6ecb87579a0\" data-region=\"eu1\" data-title=\"Kontaktieren Sie unsere Experten.\" data-success-close=\"1500\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/xiting.com\/en\/consulting\/authorization-management\/testsimulation-of-roles-and-authorizations\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Start Productive Test Simulation (PTS) <\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-795eb87e elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"795eb87e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">3. Evaluating the SAP Authorization Trace <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5f36cd1e elementor-widget elementor-widget-text-editor\" data-id=\"5f36cd1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW54055951 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW54055951 BCX8\">The administrator then starts transaction STUSOBTRACE again to evaluate the test. As shown in Figure 4, they restrict the trace to the transaction code ZSM30_PASSWORDS.<\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-373cee14 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"373cee14\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/4.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig. 4 SAP Restrictions for the Evaluation of Transaction ZSM30_PASSWORDS\" data-elementor-lightbox-description=\"SAP restrictions for evaluation screen with transaction code ZSM30_PASSWORDS and a maximum of 500 hits configured\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NjQsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvNC5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1102\" height=\"339\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/4.png\" class=\"attachment-full size-full wp-image-67664\" alt=\"SAP restrictions for evaluation screen with transaction code ZSM30_PASSWORDS and a maximum of 500 hits configured\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/4.png 1102w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/4-300x92.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/4-1024x315.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/4-768x236.png 768w\" sizes=\"(max-width: 1102px) 100vw, 1102px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"> Figure 4 \u2013 Application-specific authorization trace evaluation<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-400054bb elementor-widget elementor-widget-text-editor\" data-id=\"400054bb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW26802430 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW26802430 BCX8\">Using the \u201cEvaluate\u201d button, they then reach the results screen. The result is clear (Figure 5).<\/span><\/span><span class=\"EOP Selected SCXW26802430 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2835bef1 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"2835bef1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1493\" height=\"259\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/5.png\" class=\"attachment-full size-full wp-image-67665\" alt=\"SAP authorization trace table USOB_AUTHVALTRC showing two hits for transaction ZSM30_PASSWORDS with authorization objects S_TABU_CLI and S_TABU_NAM\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/5.png 1493w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/5-300x52.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/5-1024x178.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/5-768x133.png 768w\" sizes=\"(max-width: 1493px) 100vw, 1493px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 5 \u2013 Results list for transaction ZSM30_PASSWORDS<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-455d50e elementor-widget elementor-widget-text-editor\" data-id=\"455d50e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">Transaction ZSM30_PASSWORDS accesses a client-independent table, so the authorization object S_TABU_CLI with the field value \u201cX\u201d for the authorization field CLIIDMAINT is also required. In addition, the authorization object S_TABU_NAM (table access via generic standard tools) is needed with the authorization field values 02 (change) for ACTVT and USR40 for TABLE,\u00a0in order to\u00a0open the table at all or change data in it.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">It&#8217;s also possible not only to evaluate the missing authorization proposals directly via transaction STUSOBTRACE, but also to maintain them through the integrated trace function in transaction SU24. There, you can adopt the appropriate authorizations directly into transaction SU24 for the respective application (or, technically speaking, into tables USOBT_C and USOBX_C) with a click.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">However, you first need to make sure the required authorization objects are stored (Figure 6).<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-50528e5 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"50528e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/6.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig. 6 SAP Change SU24 Data \u2013 Adding Objects from Authorization Trace\" data-elementor-lightbox-description=\"SAP SU24 maintenance screen for ZSM30_PASSWORDS showing the option to add an authorization object from the local authorization trace\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NjYsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvNi5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1899\" height=\"721\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/6.png\" class=\"attachment-full size-full wp-image-67666\" alt=\"SAP SU24 maintenance screen for ZSM30_PASSWORDS showing the option to add an authorization object from the local authorization trace\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/6.png 1899w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/6-300x114.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/6-1024x389.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/6-768x292.png 768w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/6-1536x583.png 1536w\" sizes=\"(max-width: 1899px) 100vw, 1899px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 6 \u2013 Maintaining authorization objects via trace in transaction SU24<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-68f643bb elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"68f643bb\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">4. Applying the Findings from the Authorization Trace <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52cc3cb elementor-widget elementor-widget-text-editor\" data-id=\"52cc3cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW50426613 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW50426613 BCX8\">Once that&#8217;s done, you can then maintain the authorization field values using the second integrated trace function, the \u201cTrace\u201d button (Figure 7).<\/span><\/span><span class=\"EOP Selected SCXW50426613 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1fa72cf elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"1fa72cf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/7.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig. 7 SAP Evaluate Trace Data for Authorization Object S_TABU_NAM\" data-elementor-lightbox-description=\"SAP S4T(1)\/100 screen evaluating trace data for the authorization object S_TABU_NAM linked to transaction ZSM30_PASSWORDS\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NjcsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvNy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1669\" height=\"435\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/7.png\" class=\"attachment-full size-full wp-image-67667\" alt=\"SAP S4T(1)\/100 screen evaluating trace data for the authorization object S_TABU_NAM linked to transaction ZSM30_PASSWORDS\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/7.png 1669w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/7-300x78.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/7-1024x267.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/7-768x200.png 768w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/7-1536x400.png 1536w\" sizes=\"(max-width: 1669px) 100vw, 1669px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 7 \u2013 Maintaining authorization field values using authorization trace data<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-712b4c0f e-con-full e-flex e-con e-child\" data-id=\"712b4c0f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-648fa68c elementor-widget elementor-widget-text-editor\" data-id=\"648fa68c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Important!\u00a0<\/strong><\/p><p><span data-contrast=\"auto\">Be sure to click through the individual authorization objects in the upper selection area of Figure 7 and adopt the required authorization values per object for the respective application there. The proposal status \u201cY\u201d (proposal with field values) should be selected in most cases.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">You\u00a0don&#8217;t\u00a0need to\u00a0maintain\u00a0the authorization object S_TCODE, since the SAP system automatically transfers this object into the\u00a0role\u00a0authorization profile,\u00a0if\u00a0you build roles properly via the role menu.\u00a0You do not need to\u00a0maintain\u00a0authorization object\u00a0<\/span><span data-contrast=\"auto\">S_TCODE,<\/span><span data-contrast=\"auto\">\u00a0as the SAP system automatically\u00a0transfers\u00a0it to the role&#8217;s authorization profile when roles are properly built using the role menu.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39e7367b elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"39e7367b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/8.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig. 8 SAP Change SU24 Data \u2013 Maintenance Status for ZSM30_PASSWORDS\" data-elementor-lightbox-description=\"SAP SU24 maintenance screen listing three authorization objects and their default values for transaction ZSM30_PASSWORDS\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NjgsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvOC5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1893\" height=\"912\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/8.png\" class=\"attachment-full size-full wp-image-67668\" alt=\"SAP SU24 maintenance screen listing three authorization objects and their default values for transaction ZSM30_PASSWORDS\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/8.png 1893w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/8-300x145.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/8-1024x493.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/8-768x370.png 768w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/8-1536x740.png 1536w\" sizes=\"(max-width: 1893px) 100vw, 1893px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 8 \u2013 SU24 maintenance for transaction ZSM30_PASSWORDS<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-738bd0eb elementor-widget elementor-widget-text-editor\" data-id=\"738bd0eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW99874461 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW99874461 BCX8\">Once you&#8217;ve maintained the required authorization proposals, you can use them by adding the transaction to the role menu (via the Profile Generator). To do this, you need to have maintained any open authorization fields in the role&#8217;s authorization profile and generated the new profile.<\/span><\/span><span class=\"EOP Selected SCXW99874461 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6eb1a3df elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"6eb1a3df\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Getting clean Authorization Trace Data and evaluating it easily with XAMS <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6347e89f elementor-widget elementor-widget-text-editor\" data-id=\"6347e89f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">In addition to SAP&#8217;s standard analysis tools, the\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/xiting-authorizations-management-suite\/\"><span data-contrast=\"none\">Xiting\u00a0Authorizations Management Suite (XAMS)<\/span><\/a><span data-contrast=\"auto\">\u00a0offers far more functionality for evaluating authorization trace data in a targeted, clear way. For example, you can use our &#8216;Xiting\u00a0SU24\u00a0Checkman,&#8217; which shows you a wide variety of authorization default values in bulk and in a clear format, and lets you maintain any missing data directly from the results list with a click.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><strong>The functions in SU24 just described can be carried out more conveniently and efficiently using the SU24\u00a0Checkman:\u00a0<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1fb25da9 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"1fb25da9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/9.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig. 9 Xiting Role Builder Reporting \u2013 Missing SU24 Proposals\" data-elementor-lightbox-description=\"Xiting Role Builder reporting screen filtering missing SU24 proposals for transaction code ZSM30_PASSWORDS using kernel data\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NjksInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvOS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1226\" height=\"913\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/9.png\" class=\"attachment-full size-full wp-image-67669\" alt=\"Xiting Role Builder reporting screen filtering missing SU24 proposals for transaction code ZSM30_PASSWORDS using kernel data\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/9.png 1226w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/9-300x223.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/9-1024x763.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/9-768x572.png 768w\" sizes=\"(max-width: 1226px) 100vw, 1226px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 9 \u2013 Xiting Role Builder in XAMS<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17dd2bfe elementor-widget elementor-widget-text-editor\" data-id=\"17dd2bfe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW175126706 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW175126706 BCX8\">Double-clicking the blue update arrow automatically stores the authorization default values from STUSOBTRACE in SU24:<\/span><\/span><span class=\"EOP Selected SCXW175126706 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-549d1bbb elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"549d1bbb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/10.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Fig.10 Xiting SU24 Checkman \u2013 Three Hits for ZSM30_PASSWORDS\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Njc2NzAsInVybCI6Imh0dHBzOlwvXC94aXRpbmcuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvMTAucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1903\" height=\"351\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/10.png\" class=\"attachment-full size-full wp-image-67670\" alt=\"\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/10.png 1903w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/10-300x55.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/10-1024x189.png 1024w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/10-768x142.png 768w, https:\/\/xiting.com\/wp-content\/uploads\/2026\/08\/10-1536x283.png 1536w\" sizes=\"(max-width: 1903px) 100vw, 1903px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Figure 10 \u2013 Xiting SU24 Checkman<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7b9da6e5 elementor-widget elementor-widget-text-editor\" data-id=\"7b9da6e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW28366187 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW28366187 BCX8\">Our XAMS also offers an integrated allow-\/denylist that flags the validation of background noise and critical authorizations, reliably alerting you to potential risks.<\/span><\/span><span class=\"EOP Selected SCXW28366187 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19ea97e3 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"19ea97e3\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Conclusion on the SAP Authorization Trace via Transaction STUSOBTRACE <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5e1e3a70 elementor-widget elementor-widget-text-editor\" data-id=\"5e1e3a70\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">With <strong>transaction STUSOBTRACE<\/strong>, you can quickly and <strong>easily update the authorization data<\/strong> for your custom developments, provided they include security-compliant <strong>AUTHORITY-CHECK<\/strong> statements in the source code.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">The <strong>authorization trace via transaction STUSOBTRACE<\/strong> significantly <strong>reduces the maintenance effort for your roles.<\/strong> Even SAP itself uses the authorization trace to maintain the necessary authorization data for applications in transaction SU24.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Finally, it&#8217;s important to note that this tool should still be used with caution, since critical authorization objects are often checked that you may not actually need, so you should not simply adopt everything from the trace.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\"><strong>Xiting&#8217;s<a href=\"https:\/\/xiting.com\/en\/xiting-authorizations-management-suite\/\">\u00a0XAMS<\/a> software solution offers<\/strong> countless other innovative features for your everyday authorization work. We also have a broad portfolio of<strong><a href=\"https:\/\/xiting.com\/en\/get-connected-run-secure\/\"> services and products<\/a> <\/strong>to support you in maintaining your authorization landscape.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><strong><span style=\"color: #cd1316;\">&gt;&gt;<\/span> Sign up today for a free, no-obligation initial consultation or Demo with our SAP security experts and find out how pleasant we can make managing your SAP landscape.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d8b0f9a hs-popup-btn elementor-widget elementor-widget-button\" data-id=\"5d8b0f9a\" data-element_type=\"widget\" data-e-type=\"widget\" data-portal=\"25088517\" data-form=\"ff252bfb-c4f8-4db5-8993-e6ecb87579a0\" data-region=\"eu1\" data-title=\"Kontaktieren Sie unsere Experten.\" data-success-close=\"1500\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/xiting.com\/en\/request-demo\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Request a feee Demo now!<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-67ed7353 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"67ed7353\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FAQ<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e06fdfb elementor-widget elementor-widget-n-accordion\" data-id=\"e06fdfb\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;max_items_expended&quot;:&quot;multiple&quot;,&quot;default_state&quot;:&quot;expanded&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2350\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-2350\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> What is the Difference between the Transactions STAUTHTRACE and STUSOBTRACE?  <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-angle-up\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-angle-right\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2350\" class=\"elementor-element elementor-element-9d06603 e-con-full e-flex e-con e-child\" data-id=\"9d06603\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-136be578 elementor-widget elementor-widget-text-editor\" data-id=\"136be578\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><p><span data-contrast=\"auto\">The main difference between transactions STAUTHTRACE and STUSOBTRACE lies in their duration and purpose:<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><span data-contrast=\"auto\">STAUTHTRACE is a short-term trace for detailed, temporary error analysis of authorization checks, and its logs are overwritten.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"7\" data-aria-level=\"1\"><span data-contrast=\"auto\">STUSOBTRACE, on the other hand, is a long-term trace that stores data for maintaining authorization default values (SU24) in a database table. The focus is on collecting successfully checked authorizations, not on error analysis.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2351\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2351\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> What is the Difference between the Transactions STUSOBTRACE and STUSERTRACE?  <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-angle-up\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-angle-right\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2351\" class=\"elementor-element elementor-element-73298e96 e-con-full e-flex e-con e-child\" data-id=\"73298e96\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-514ca30a elementor-widget elementor-widget-text-editor\" data-id=\"514ca30a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><p><span class=\"TextRun SCXW240899531 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW240899531 BCX8\">STUSOBTRACE is user-independent and collects authorization data in the application context, primarily to maintain default values (SU24). STUSERTRACE is a specific user trace that specifically records the activities of individual users\u00a0<\/span><span class=\"NormalTextRun SCXW240899531 BCX8\">in order to<\/span><span class=\"NormalTextRun SCXW240899531 BCX8\">\u00a0validate their authorizations. It&#8217;s essentially a STUSOBTRACE filtered down to specific users. Both transactions are long-term traces.<\/span><\/span><span class=\"EOP Selected SCXW240899531 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"What is the Difference between the Transactions STAUTHTRACE and STUSOBTRACE?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The main difference between transactions STAUTHTRACE and STUSOBTRACE lies in their duration and purpose:\\u00a0STAUTHTRACE is a short-term trace for detailed, temporary error analysis of authorization checks, and its logs are overwritten.\\u00a0STUSOBTRACE, on the other hand, is a long-term trace that stores data for maintaining authorization default values (SU24) in a database table. The focus is on collecting successfully checked authorizations, not on error analysis.\\u00a0\"}},{\"@type\":\"Question\",\"name\":\"What is the Difference between the Transactions STUSOBTRACE and STUSERTRACE?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"STUSOBTRACE is user-independent and collects authorization data in the application context, primarily to maintain default values (SU24). STUSERTRACE is a specific user trace that specifically records the activities of individual users\\u00a0in order to\\u00a0validate their authorizations. It&#8217;s essentially a STUSOBTRACE filtered down to specific users. Both transactions are long-term traces.\\u00a0\"}}]}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-135545de e-con-full e-flex e-con e-child\" data-id=\"135545de\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Maintain authorization default values easily with the SAP authorization trace \u2013 we&#8217;ll show you how! Includes practical examples. <\/p>\n","protected":false},"author":86,"featured_media":66855,"parent":63203,"menu_order":0,"template":"elementor_header_footer","sap-knowledge-category":[1864],"class_list":["post-66856","sap-knowledge","type-sap-knowledge","status-publish","has-post-thumbnail","hentry","sap-knowledge-category-authorizations-management"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.2 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SAP Authorization Trace &amp; Transaction STUSOBTRACE<\/title>\n<meta name=\"description\" content=\"Maintain authorization default values easily with the SAP authorization trace \u2013 we&#039;ll show you how! Includes practical examples.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SAP Authorization Trace \u2013 Transaction STUSOBTRACE\" \/>\n<meta property=\"og:description\" content=\"Maintain authorization default values easily with the SAP authorization trace \u2013 we&#039;ll show you how! Includes practical examples.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiting\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/XitingAG\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-26T12:58:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/05\/shutterstock_2145474365-1-1024x608.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"608\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"SAP Authorization Trace \u2013 Transaction STUSOBTRACE\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/\"},\"author\":{\"name\":\"Nicole Wolderling\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/person\\\/180f0cebe146a6c6c6d1e4e791601bc2\"},\"headline\":\"SAP Authorization Trace \u2013 Transaction STUSOBTRACE\",\"datePublished\":\"2026-08-07T09:53:10+00:00\",\"dateModified\":\"2026-08-26T12:58:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/\"},\"wordCount\":2056,\"publisher\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/shutterstock_2145474365-1.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/\",\"name\":\"SAP Authorization Trace & Transaction STUSOBTRACE\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/shutterstock_2145474365-1.jpg\",\"datePublished\":\"2026-08-07T09:53:10+00:00\",\"dateModified\":\"2026-08-26T12:58:15+00:00\",\"description\":\"Maintain authorization default values easily with the SAP authorization trace \u2013 we'll show you how! Includes practical examples.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/#primaryimage\",\"url\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/shutterstock_2145474365-1.jpg\",\"contentUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/shutterstock_2145474365-1.jpg\",\"width\":5079,\"height\":3014,\"caption\":\"Person am Laptop, umgeben von schwebenden Dokument-Fenstern als Sinnbild f\u00fcr Dokumentenverwaltung\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-authorizations-explained\\\/sap-authorization-trace\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/xiting.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SAP Authorizations\",\"item\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-berechtigungen\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SAP Authorization Trace \u2013 Transaction STUSOBTRACE\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/\",\"name\":\"Xiting\",\"description\":\"Your Expert for SAP Security\",\"publisher\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/xiting.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\",\"name\":\"Xiting\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/xiting-logo.png\",\"contentUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/xiting-logo.png\",\"width\":960,\"height\":504,\"caption\":\"Xiting\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/XitingAG\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/1345129\\\/\",\"https:\\\/\\\/www.instagram.com\\\/xiting.global\\\/\",\"https:\\\/\\\/www.crunchbase.com\\\/organization\\\/xiting\",\"https:\\\/\\\/www.youtube.com\\\/@Xiting\"],\"description\":\"Xiting wurde 2008 von erfahrenen SAP-Beratern in der Schweiz gegr\u00fcndet. Heute besch\u00e4ftigt das Unternehmen 140 Mitarbeitende an mehreren Standorten weltweit. Die SAP Security Consultants von Xiting bringen tiefes Fachwissen aus der Projektpraxis mit und betreuen \u00fcber 700 nationale und internationale Kunden \u2013 remote und vor Ort.\",\"email\":\"info@xiting.ch\",\"telephone\":\"+41 43422 8803\",\"legalName\":\"Xiting AG\",\"foundingDate\":\"2008-06-01\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"51\",\"maxValue\":\"200\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/person\\\/180f0cebe146a6c6c6d1e4e791601bc2\",\"name\":\"Nicole Wolderling\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5ba685a09ef1001a1359472328f1668296fa7a48f1cf4ef55264348509541f3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5ba685a09ef1001a1359472328f1668296fa7a48f1cf4ef55264348509541f3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5ba685a09ef1001a1359472328f1668296fa7a48f1cf4ef55264348509541f3e?s=96&d=mm&r=g\",\"caption\":\"Nicole Wolderling\"},\"description\":\"Since 2023, Nicole Wolderling has led the Consulting Unit for Authorization Management and has been a Managing SAP Security Consultant at Xiting since 2017. Her expertise centers on executing redesign projects, developing and implementing authorization concepts, and managing S\\\/4HANA migrations. Nicole has successfully overseen numerous authorization projects across a variety of companies.\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/author\\\/nwolderling\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SAP Authorization Trace & Transaction STUSOBTRACE","description":"Maintain authorization default values easily with the SAP authorization trace \u2013 we'll show you how! Includes practical examples.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/","og_locale":"en_US","og_type":"article","og_title":"SAP Authorization Trace \u2013 Transaction STUSOBTRACE","og_description":"Maintain authorization default values easily with the SAP authorization trace \u2013 we'll show you how! Includes practical examples.","og_url":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/","og_site_name":"Xiting","article_publisher":"https:\/\/www.facebook.com\/XitingAG","article_modified_time":"2026-08-26T12:58:15+00:00","og_image":[{"width":1024,"height":608,"url":"https:\/\/xiting.com\/wp-content\/uploads\/2026\/05\/shutterstock_2145474365-1-1024x608.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_title":"SAP Authorization Trace \u2013 Transaction STUSOBTRACE","twitter_misc":{"Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/#article","isPartOf":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/"},"author":{"name":"Nicole Wolderling","@id":"https:\/\/xiting.com\/en\/#\/schema\/person\/180f0cebe146a6c6c6d1e4e791601bc2"},"headline":"SAP Authorization Trace \u2013 Transaction STUSOBTRACE","datePublished":"2026-08-07T09:53:10+00:00","dateModified":"2026-08-26T12:58:15+00:00","mainEntityOfPage":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/"},"wordCount":2056,"publisher":{"@id":"https:\/\/xiting.com\/en\/#organization"},"image":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/#primaryimage"},"thumbnailUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2026\/05\/shutterstock_2145474365-1.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/","url":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/","name":"SAP Authorization Trace & Transaction STUSOBTRACE","isPartOf":{"@id":"https:\/\/xiting.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/#primaryimage"},"image":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/#primaryimage"},"thumbnailUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2026\/05\/shutterstock_2145474365-1.jpg","datePublished":"2026-08-07T09:53:10+00:00","dateModified":"2026-08-26T12:58:15+00:00","description":"Maintain authorization default values easily with the SAP authorization trace \u2013 we'll show you how! Includes practical examples.","breadcrumb":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/#primaryimage","url":"https:\/\/xiting.com\/wp-content\/uploads\/2026\/05\/shutterstock_2145474365-1.jpg","contentUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2026\/05\/shutterstock_2145474365-1.jpg","width":5079,"height":3014,"caption":"Person am Laptop, umgeben von schwebenden Dokument-Fenstern als Sinnbild f\u00fcr Dokumentenverwaltung"},{"@type":"BreadcrumbList","@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-trace\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiting.com\/en\/"},{"@type":"ListItem","position":2,"name":"SAP Authorizations","item":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-berechtigungen\/"},{"@type":"ListItem","position":3,"name":"SAP Authorization Trace \u2013 Transaction STUSOBTRACE"}]},{"@type":"WebSite","@id":"https:\/\/xiting.com\/en\/#website","url":"https:\/\/xiting.com\/en\/","name":"Xiting","description":"Your Expert for SAP Security","publisher":{"@id":"https:\/\/xiting.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiting.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiting.com\/en\/#organization","name":"Xiting","url":"https:\/\/xiting.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiting.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/xiting.com\/wp-content\/uploads\/2025\/08\/xiting-logo.png","contentUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2025\/08\/xiting-logo.png","width":960,"height":504,"caption":"Xiting"},"image":{"@id":"https:\/\/xiting.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/XitingAG","https:\/\/www.linkedin.com\/company\/1345129\/","https:\/\/www.instagram.com\/xiting.global\/","https:\/\/www.crunchbase.com\/organization\/xiting","https:\/\/www.youtube.com\/@Xiting"],"description":"Xiting wurde 2008 von erfahrenen SAP-Beratern in der Schweiz gegr\u00fcndet. Heute besch\u00e4ftigt das Unternehmen 140 Mitarbeitende an mehreren Standorten weltweit. Die SAP Security Consultants von Xiting bringen tiefes Fachwissen aus der Projektpraxis mit und betreuen \u00fcber 700 nationale und internationale Kunden \u2013 remote und vor Ort.","email":"info@xiting.ch","telephone":"+41 43422 8803","legalName":"Xiting AG","foundingDate":"2008-06-01","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"51","maxValue":"200"}},{"@type":"Person","@id":"https:\/\/xiting.com\/en\/#\/schema\/person\/180f0cebe146a6c6c6d1e4e791601bc2","name":"Nicole Wolderling","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5ba685a09ef1001a1359472328f1668296fa7a48f1cf4ef55264348509541f3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5ba685a09ef1001a1359472328f1668296fa7a48f1cf4ef55264348509541f3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5ba685a09ef1001a1359472328f1668296fa7a48f1cf4ef55264348509541f3e?s=96&d=mm&r=g","caption":"Nicole Wolderling"},"description":"Since 2023, Nicole Wolderling has led the Consulting Unit for Authorization Management and has been a Managing SAP Security Consultant at Xiting since 2017. Her expertise centers on executing redesign projects, developing and implementing authorization concepts, and managing S\/4HANA migrations. Nicole has successfully overseen numerous authorization projects across a variety of companies.","url":"https:\/\/xiting.com\/en\/author\/nwolderling\/"}]}},"_links":{"self":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge\/66856","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge"}],"about":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/types\/sap-knowledge"}],"author":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/users\/86"}],"version-history":[{"count":32,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge\/66856\/revisions"}],"predecessor-version":[{"id":67673,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge\/66856\/revisions\/67673"}],"up":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge\/63203"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/media\/66855"}],"wp:attachment":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/media?parent=66856"}],"wp:term":[{"taxonomy":"sap-knowledge-category","embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge-category?post=66856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}