Create a New Authorization Object in SAP

The following SAP security training tutorials guide how to create authorization objects in SAP step by step. In our previous training tutorials, we have learnt about an overview of authorization object and field values.

Refer to the below step-by-step procedure for how to define new authorization objects and Object classes in the SAP system.

Step 1: – Enter transaction code “SU21” in the SAP command field and press enter.

Transaction code su21 to maintain authorization objectStep 2: – It is mandatory to create an object class and later we are going to assign it to authorization objects. On maintain authorization object screen, click on create button and then select object class.

create authorization class

Step 3: – On create authorization object class screen, update the following details.

  1. Object Class: – Enter the key that identifies the authorization object class in SAP systems.
  2. Text: – Update the descriptive text of the auth. object class.
  3. After updating details, click on the save button to save the configured object class.
  4. Author: – By default author field updated by the system, i.e user id of the responsible person.

create authorization object class

Step 4: – Successfully we have created an object class in SAP systems. Now select object class and click on create and select authorization object as shown below.

How to create Authorization Object and Object class in SAP

On create authorization object screen, update the following details.

  1. Object: – Enter the new object id as per your organization requirements that identify the authorize object in SAP systems
  2. Text: – Update the descriptive text of the authorization object.
  3. Activity field: – Assign the authorization field to the custom authorization object, here we assigned the “ACTVT” field.

create authorization object in SAP

Now click on permitted activities and select the activities for field and select the save button. Here we selected activities of 01- create or generate, 02- change, 03- display, and 06- deleted.

define values

Similarly, create objects and save the data. Successfully we have created a custom object class with authorization objects.