View Source

This article outlines the process which needs to be followed when managing a request for transaction access, missing access and additional access (eg. Plant, Sales Org, etc.) in the PI1 and SI1 system.

PI1 is the Production Environment and the SI1 is the Pre Production Environment.

Identifying the Tickets :

When the users mentions that he / she needs access to a Transaction, Plant, Sales org, etc. or if the user has added a screenshot of an error or the SU53, then it can be identified as a Missing Access. If the user needs access to a Transaction, then it can be identified as ticket for Transaction Access. The users generally exist in the system. These tickets may have the accompanying information like the Name of the User / ID, Reference User Name / ID, Systems, etc.

Providing the Access :

It is very important to understand that we need to start the SU53 analysis or the transaction access analysis directly in the PI1 and SI1.

When we receive a Missing Access request, after we check the approvals, we always need the SU53 screenshot or text file in order to obtain the Object and the Object Values. In the case of a transaction access, the object for the transaction code is generally s_tcode and the object value is the transaction code itself. The SU53 file looks like the below. (Please note... The analysis is to be done in the same way as the PF1 system and hence, the below example is of the PF1 system. There is no change in the analysis and only change in the assignment which is done by the CUA PQ1_001 system.)

In the above screenshot, V_LIKP_VST is the Object and the Object Values are ACTVT - 02 and VSTEL - 1031.
The corresponding role for the transaction or the missing access has to be found out through the transaction SUIM (User Information System → Roles → Roles by Complex Selection Criteria) based on the users Existing roles, Country, GBU, Function, etc.

Once the role is found out, the same is assigned to the user in the IDM and ticket is Resolved.

If a user asks to add the role (or in case of a User Creation) in the PI1 system then the same roles has to added in the SI1 system too. But the vice-versa should not be done, i.e. if the user needs access in the SI1 system then the same has to provided only in the SI1 system. Also, if required, we can ask for the Reference User too.

We have now finished the request for the Missing Access for the user in the PI1 and SI1 system.