HOW TO SAP - Perform system trace for missing authorization

How to perform system trace for authorization

1. Execute tcode ST01
   
2. Check Authorization Check (you may select more)
   
   
   
3. Click Trace On (Make sure to turn it off after you are done!)
   
   
   
4. Now ask user to perform their task.
5. *If there is more then one app server, go tcode SM51
6. *Then double click on the app server.
7. *Then repeat step 1 to 3
8. Remember - Once user completed the test, turn of all trace from ST01
   
9. Now, click Analysis
   
   
   
10. Filter the trace like below (select what you need)
    
11. For authorization issue, anything above RC=0 meaning there is missing authorization.
    

Table usla04 to locate single role coming from which child system in CUA

In CUA system, you can use table USLA04 to  check the role originates from which child system.

1. SE16
2. Enter USLA04