This blog contains experience gained over the years of implementing (and de-implementing) large scale IT applications/software.

Values for SAP Auth Objects F_REGU_BUK and F_REGU_KOA

Whilst configuring some new read-only SAP roles for FICO access, you may be struggling to find the descriptions for the actions for authorisation objects F_REGU_BUK and F_REGU_KOA and the values for FBTCH (Action for Automatic Procedure).
The descriptions do not appear in the usual auth object display screens.

Within the SAP GUI, if you go into transaction F110, then from the menu select “Environment -> Authorizations”, a popup will be displayed with the following legend:

02Edit parameters
03Display parameters
11Execute proposal
12Edit proposal
13Display proposal
14Delete proposal
15Create payment medium proposal
21Execute payment run
23Display payment run
24Delete payment run payment dat
25Create payment media of paymen
26Delete payment orders of payme
31Print payment medium manually

For a read-only role, I would recommend only actions 03,13,23 and possibly 31 (in case the electronic BACS payment method breaks).

All Reports & Transactions Under SUIM

The list below is useful if you are constructing a roll to house the SUIM capabilities:

Users by System S_BIE_59000198

Users by Roles S_BIE_59000199

Users by Profiles S_BIE_59000197

Users by Address Data S_BCE_68001393

Users by Complex Selection Criteria S_BCE_68001400

By user ID S_BCE_68001394

By Role S_BCE_68001399

By Profiles S_BCE_68001395

By Authorizations S_BCE_68001396

By Authorization Values S_BCE_68001397

By Transaction Authorizations S_BCE_68001398

By Critical Combinations of Authorizations at Transaction Start S_BCE_68001401

With Unsuccessful Logons S_BCE_68001402

By Logon Date and Password Change RSUSR200

List of Users With Critical Authorizations S_BCE_68001403

With Critical Authorizations (New Version) S_BCE_68002111

Roles by Complex Selection Criteria S_BCE_68001425

By Role Name S_BCE_68001418

By User Assignment S_BCE_68001419

By Transaction Assignment S_BCE_68001420

By MiniApp S_BIE_59000249

By Profile Assignment S_BCE_68001421

By Authorization Object S_BCE_68001422

By Authorization Values S_BCE_68001423

By Change Dates S_BCE_68001424

Profiles by Complex Selection Criteria S_BCE_68001409

By Profile Name or Text S_BCE_68001767

By Profiles Contained S_BCE_68001404

By Authorizations S_BCE_68001405

By Authorization Values S_BCE_68001406

By Last Change S_BCE_68001407

By Role S_BCE_68001408

Authorizations by Complex Selection Criteria S_BCE_68001417

By Object S_BCE_68001414

By Values S_BCE_68001415

By Last Change S_BCE_68001416

Authorization Objects by Complex Selection Criteria S_BCE_68001413

By Object Name, Text S_BCE_68001410

By Object Class S_BCE_68001411

By Field, Text S_BCE_68001412

Executable Transactions (All Selection Options) S_BCE_68001429

Executable for User S_BCE_68001426

Executable for Role S_BCE_68002041

Executable with Profile S_BCE_68001427

Executable with Authorization S_BCE_68001428

From users S_BCE_68001430

from Roles S_BCE_68001777

From profiles S_BCE_68001431

From authorizations S_BCE_68001432

In Users S_BCE_68001399

In Users S_BCE_68001395

In Roles S_BCE_68001421

In Composite Profiles S_BCE_68001404

In Users S_BCE_68001396

In Profiles S_BCE_68001405

In Users S_BCE_68001397

In Roles S_BCE_68001423

In Profiles S_BCE_68001406

In Authorizations S_BCE_68001415

In Programs S_BCE_68002030

For Users S_BCE_68001439

for Role Assignment RSSCD100_PFCG_USER

For Roles RSSCD100_PFCG

For Profiles S_BCE_68001440

For Authorizations S_BCE_68001441

Useful SAP Transactions

Here are a collection of SAP transactions that I find useful:

AISUSER – Solution Manager maintain S-user for maint-opt.
AL08 – All Users Logged On
AL13 – Display Shared Memory
ALRTCATDEF – Alert category definitions
ALRTDISP – Alert display
ALTINBOX – Alert inbox
BDLSS – Shows all items associated with the logical system name.
BDM7 – ALE Audit Statistics
BD10 – Send Material Master
BD12 – Send Customer Master
BD14 – Send Vendor Master
BD22 – Reorganise (Delete) Change Pointers
BD87 – ALE Message Monitor
BF24 – Create Product (User exits)
BF34 – Register user exit event to function module.
CG3Z – Transfer file from frontend.
CMOD – List user exits
DB02 – Database Tables/Tablespace Statistics
DB13 – Database Planning Calendar
DB14 – Database Operations Log
DB26 – Database Parameters
DBCO – External Database Connections in SAP.
F.10 – GL Accounts
F110 – BACS Payments
FBL1N – List Invoice Documents
IDX1 – Port Maintenance In IDoc Adapter
IDX2 – Meta Data Overview in IDoc Adapter
IDX5 – XI IDoc search.
LISTSCHEMA – BW Lists underlying tables for InfoCubes.
MMRV – Show current posting period
OAAD – Archivelink Administration of Stored Documents
OAER – Business Document Navigator
OAM1 – ArchiveLink Monitor
OAC0 – Define content servers
OAWD – Archivelink Document Storage.
OB29 – Define Posting Periods (See also SPRO -> Fianncial Accounting -> Financial Accounting Global Settings -> Fiscal Year)
OMJ3 – Printer Determination by Plant.
OMJR – Printer Determination by Output Type.
OS01 – Ping servers
ORA_PERF – Analyse tables, delete statistics.
OY18 – Reports for table logging.
PA30 – Maintain HR Master
PFAL – HR ALE Transfer of Master Data.
PFCG – Role Maintenance
PFTC – Workflow task maintenance.
PFTC_CHG – Change a workflow task.
PFUD – Profile consistency (mass user comparison) check (schedule job).
RMPS_SET_SUBSTITUTE – Set Workflow substitute.
PPOME – HR Mini Master (Personnel Management)
PPOMW – HR Mini Master (Organisational Management)
RRMX – Launch BEX Analyser
RSA7 – BW Delta Queue Maintenance
RSCSAUTH  – Maintain authorisation groups.
RSM37 – Display background jobs with parameters.
RSRDA – Stop all daemons for real-time data acquisition in BW.
RZ01 – Job Scheduling Monitor.
RZ03 – Display/ Manully Switch Operation Mode (start/stop instance).
RZ04 – Maintain Operations Modes
RZ12 – Maintain RFC groups.
RZ21 – Monitoring Properties
RZ70 – SLD Administration
SA38 – ABAP Reporting
SAPL0ARC – Archiving Customising For Object.
SCCL – Local Client Copy.
SCEM – CATT initial screen.
SCU3 – Analyse table logging logs
SDCCN – Service Data Control Centre
SECR – AIS (Audit Information System)
SE03 – System Change Option
SE11 – Data Dictionary Display
SE21 – Package Builder.
SE61 – Change display screen text.
SE93 – Transaction lookup.
SE37 – ABAP Function Modules
SE54 – Generate Table Maintenance.
SBIW – Maintain Business Information Warehouse Data Sources
SCU0 – Customizing Cross System Viewer
SLDCHECK – Check status of the SLD
SLG1 – Analyse application log
SLG2 – Application Logs Delete
SMLG – Logon groups.
SMGW – Gateway monitoring
SMICM – ICM Monitor
SMQ1 – qRFC Monitor (Outbound Queue)
SMQ2 – qRFC Monitor (Inbound Queue)
SMQ3 – qRFC Monitor (Saved E-Queue)
SMQE – qRFC Administration
SMSY – SOLMAN – Landscape Directory
SMSY_SETUP – Solution Directory Setup
SMX – Own Jobs
SM18 – Security Audit Log Reorganisation
SM19 – Security Audit Log Configuration
SM20 – Security Audit Log Analysis
SM35 – Batch Input Log (LSMW etc)
SM58 – Asynchornous RFC Error Log
SM63 – Maintain Operation Modes Calendar
SM64 – Background Jobs Events.
SM65 – Background processing check.
SM66 – All processes across system.
SM69 – Maintain External Commands
SO36 – Automatic System Forwarding for E-Mails
SOA0 – ArchiveLink Document Types.
SOLMAN_WORKCENTER – Solution Manager Maintenance Optimizer.
SP12 – TemSe administration
SSAA – System Administrator Assistant
ST02 – SAP Buffer Tuning
ST03 – Global Workload Monitor
ST04 – Database Statistics
ST06 – Operating System Monitor
SUCU – Table / View Authorisations.
SUGR – User Group Maintenance
SWDD – Workflow Builder.
SWDM – Workflow Builder
SWI1 – Workflow Instance Log
SWE2 – Workflow linkages
SWEL – Display Event Trace
SWELS – Switch on/off event trace
SWEQADM – Event Queue Administration
SWEQBROWSER – Event queue browser
SWO1 – Business Object Builder
SWU0 – Workflow event simulation
SWU3 – Workflow customizing
SWUS – Test Workflow
SWWL – Delete workflow
SXMB_MONI – Integration Engine Monitoring
SXMB_MONI_BPE – Process Engine Monitoring
SXMB_IFR – Call Integration Builder
SXMB_ADM – Integration Engine Admin
SXI_CACHE – XI Directory Cache
SXI_MONITOR – XI Message Monitoring
TU02 – Change parameters
USMM – User Measurement Statistics.
WE02 – IDoc Display
WE07 – IDoc Monitoring
WE05 – IDoc List.
WE09 – IDoc Search.
WE11 – Delete IDocs
WE19 – IDoc Test Tool
WE20 – IDoc Partner Profiles
WE40 – Idoc administration setup
WE41 – Outbound Process codes.
WE42 – Inbound process codes.
WE46 – IDoc Admin
WE60 – IDoc Types Documentation
XK02 – Changer Vendor Details