Do you need to find out what roles you have set up with restricted company code values for specific authorization objects?

If your company has changed its company code (BURK) and if you have limited access to a particular company code in your roles, you will have to adjust the roles to use the new company code or to use * for any code.

But, how do you quickly find out what roles you need to adjust?

Simple. Query table AGR_1252 and check the contents of the LOW and HIGH fields. You can use your favorite query tool (Query Analyzer in SQL Server for example) or use transaction SE16 or SE11 within SAP.

Here is a sample query:

select MANDT, AGR_NAME, VARBL, LOW, HIGH
from AGR_1252
where MANDT=’100′
and (LOW <>‘’ or HIGH <>‘’)
and (LOW <>‘*’ and HIGH <>‘*’)
and AGR_NAME not like ‘SAP%’

The above query looks for any non-SAP role in client 100 where either LOW or HIGH have anything different than *.

You’ll get a list of the roles you need to adjust to use the new company code.

Posted by SAP Master in Useful Tips