In SAP S/4HANA Cloud Public Edition, what can you do with the Display Authorization Trace? Note: There are 3 correct answers to this question.

Question

Options

• AAnalyze authorization check results for missing authorizations
• BDisplay business roles granting specific access
• CAdjust role restrictions to account for missing authorizations
• DAnalyze authorization check results for already assigned authorizations
• EAdjust role restrictions to further limit access when performing forensic analysis

• A
  76% (16)
• C
  19% (4)
• E
  5% (1)

Explanation

Display Authorization Trace is a read-only diagnostic tool used to investigate authorization behavior - it shows what happened during authorization checks, not what to change. Options A and D are correct because the trace captures authorization check results for both missing authorizations (failed checks) and already-assigned authorizations (successful checks), giving a complete picture of access decisions. Option B is correct because you can drill into those results to see which business roles are granting the specific access that was checked.

Options C and E are wrong for the same core reason: the Display Authorization Trace is purely analytical - it does not allow you to modify or adjust role restrictions in any way. Any changes to roles must be done through separate role management tools (like the Maintain Business Roles app), not from within the trace.

Memory tip: Think of "Display" as the key word - a display tool can only show you things (A, B, D), never change things (C, E). If an answer option starts with a verb like "Adjust," it's almost certainly not what a read-only trace can do.

No community discussion yet for this question.