SU24
SU24 is the SAP transaction used to maintain authorization defaults (the USOBT/USOBX relationship between transactions and authorization objects) that drive what appears in the PFCG role authorization proposal. Getting SU24 right is foundational to least-privilege role design, controlling authorization object check behavior, and reducing audit findings caused by over-generous or missing authorization proposals across ECC and S/4HANA.
Overview
SU24 is the SAP transaction used to maintain authorization defaults (the USOBT/USOBX relationship between transactions and authorization objects) that drive what appears in the PFCG role authorization proposal. Getting SU24 right is foundational to least-privilege role design, controlling authorization object check behavior, and reducing audit findings caused by over-generous or missing authorization proposals across ECC and S/4HANA.
Lessons in this topic
- What SU24 Is and Why Authorization Defaults MatterUnderstand the business and technical purpose of SU24, how it links transactions to authorization objects, and why it is the backbone of PFCG role building.
- Maintaining Check Indicators and Default Values in SU24Learn how to configure check indicators (Check/No Check/Unmaintained/Check with Template) and default field values for authorization objects assigned to a transaction in SU24, and how these settings drive PFCG proposals.
- Enterprise SU24 Governance: Landscape Consistency, Transport Strategy, and S/4HANA/Fiori MigrationDesign an enterprise-grade governance model for SU24 maintenance that keeps authorization defaults consistent across a multi-system, multi-track landscape, survives S/4HANA and Fiori transitions, and supports auditable, low-risk change management.
- Maintaining Check Indicators and Role Menu Integration in SU24Learn how to configure check indicators and default field values in SU24, how these settings flow into PFCG role menus, and how to safely change them without breaking existing roles.
- Enterprise SU24 Governance: Mass Maintenance, Custom Transactions, and Cross-Landscape ConsistencyExplore advanced SU24 governance practices for large landscapes, including mass maintenance approaches, custom transaction onboarding, transport strategy, and keeping SU24 data consistent across ECC, S/4HANA, and multiple system tiers.