In SAP, tables are a very effective way of obtaining information in daily authorization work. They contain all relevant data stored in the system about roles, users, etc.
An overview of the most helpful tables can be found here:
Tables about roles
| AGR_1016 | Activity group profile name |
| AGR_1016B | Name of the activity group profile |
| AGR_1250 | Authorization data for the activity group |
| AGR_1251 | Authorization data for the activity group |
| AGR_1252 | Organizational level for the authorizations |
| AGR_AGRS | Single roles in composite roles |
| AGR_DEFINE | Role definitions |
| AGR_HIER2 | Structure information of the menu – customer version SAP roles |
| AGR_HIERT | Texts for the role menu |
| AGR_OBJ | Assignment of menu nodes to the role |
| AGR_PROF | Profile name for the role |
| AGR_TCDTXT | Assignment of roles to transactions |
| AGR_TEXTS | Storage structure for hierarchical menu – customer |
| AGR_TIME | Timestamp for role (menu, profile, authorizations) |
| AGR_USERS | Assignment of roles to users |
Tables for general authorizations (Customizing)
| DEVACCESS | Table for development users (developer key) |
| PRGN_CUST | Customizing settings for authorization system |
| SSM_CUST | Setting values for Session Manager / Profile Generator |
| TOBJ | Authorization objects |
| TOBJC | Classification of authorization objects |
| USOB_AUTHVALTRC | Result of authorization trace |
| USOB_MOD | Applications for Upgrade Profile Generator |
| USOBHASH | Authorization trace for services: Hash values |
| USOBT | Relation transaction – authorization object |
| USOB_C | Relation transaction – authorization object (customer) |
| USOBT_CD | Change history of authorization default values for field values |
| USOBT_TSTMP | Local time stamp of the last SAP change (USOBT) |
| USOBX | Check table (for table USOBT) |
| USOBXFLAGS | Temporary table for storing the changes in table USOBX/T*. |
| USOBX_C | Check table for table USOBT_C |
| USOBX_CD | Change history for check indicator |
| USOBX_TSTMP | Local time stamp of last SAP change |
| USORG | Org levels for profile generator |
| USR_CUST | Customizing settings for user / authorization system |
Tables about users
| USER_ADDR | Generated table for view USER_ADDR |
| USGRP | User groups |
| USH02 | Change history for logon data |
| USL04 | COA: Assignment user to profiles |
| USLA04 | COA: Assignment user to roles |
| USR01 | User master (runtime data) |
| USR02 | Logon data (kernel-side usage) |
| USR04 | User master: Authorizations |
| USR06 | Additional data per user |
| USR10 | User master: authorization profiles |
| USR11 | User master: Texts for profiles (table USR10) |
| USR12 | User master: Authorization values |
| USR13 | Short texts for authorizations |
| USR40 | Table for forbidden passwords |
| USRBF2 | User buffer contents for fast RFC logon |
| USRBF3 | User buffer contents for fast RFC logon |
| UST04 | User master records |
| UST10C | User master: collective profiles |
| UST12 | User master: authorizations |