Optimize Transaction SU24

Transaction SU24 is the front-end for SAP’s authorizations proposals database. In other words, SU24 stores authorizations proposals for transactions, function modules and other security objects.

Leveraging SU24 can significantly reduce the effort involved in designing and maintaining roles and authorizations, as well as improve the transparency of roles.

You can learn more about SU24 in our blog series, but here is an example of how SU24 works. 

SU01D is a display transaction that always requires (at least) Activity 03 to work properly. As a result, you can add the combination of Activity 03 and TCODE SD01D to SU24. Then, the next time a role administrator adds SU01D to a role menu, the activity field and value get automatically added to the role — mitigating the need to manually insert the authorization data.

Transaction SU24 forms the basis for the secure and efficient creation of roles. Therefore, it is one of the most important transactions in the area of SAP security. Maintaining the values in SU24 is often overlooked, causing role creation and maintenance to be error-prone.