ACO_ROLE is a standard SAP table in SAP ECC (or) S/4HANA which stores Object-Related Authorizations for a Role data. There are total 7 fields in ACO_ROLE table.This blog post provides key technical details of SAP table ACO_ROLE, including its availability across SAP S/4HANA versions and the list of CDS views for ACO_ROLE table in SAP.
| SAP HANA Table Type | Column Store |
|---|---|
| Buffering Permission | Buffering not allowed |
| Buffering Type | No buffering |
| Package | Authorization Check with Access Control Objects (ACO) |
| Technical Component | Cross-Application Components (CA) |
SAP ACO_ROLE Table Fields
The following is the list of fields that are available in SAP ACO_ROLE table. The key fields of the table are highlighted in color.
| Field | Description | Data Element | Domain | Check Table | Data Type |
|---|---|---|---|---|---|
| CLIENT | Client | MANDT | MANDT | * | CLNT (3) |
| ID | Authorization ID | ACO_AUTHORITY_ID | SYSUUID | RAW (16) | |
| ROLE_ID | Role ID | ACO_ROLE_ID | AGR_NAME | * | CHAR (30) |
| OBJECT_ID | Object ID | ACO_OBJECT_ID | SYSUUID | RAW (16) | |
| TOP_NODE_ID | ID of Highest Node in the Hierarchy | ACO_TOP_ID | SYSUUID | RAW (16) | |
| ACTIVITY | Activity for Authorization Check | ACO_ACTVT | ACO_ACTVT | CHAR (10) | |
| TYPE | Object Category | ACO_OBJECT_TYPE | ACO_OBJECT_TYPE | * | CHAR (15) |
Availability
The SAP table ACO_ROLE is available within SAP S/4HANA On-premise and SAP S/4HANA Cloud systems depending on the version and release level.
| SAP S/4HANA Version | Available? |
|---|---|
| 1909 | Yes |
| 2020 | Yes |
| 2021 | Yes |
| 2022 | Yes |
| 2023 | Yes |
CDS Views for ACO_ROLE table
The following is the list of ACO_ROLE CDS views, which can also be used instead of ACO_ROLE table based on your business requirements.
| CDS View | CDS View Type | Description |
|---|---|---|
| I_PPM_AUTHORIZATIONFORSEARCH | BASIC | Read Authorization of PPM Objects for Enterprise Search |
| I_PPM_AUTHORIZATIONUSERREAD | BASIC | Read-Authorizations of PPM objects for logon user |
| I_PPM_AUTHORIZATIONUSERWRITE | BASIC | Write-Authorizations of PPM objects for logon user |
| I_PPM_AUTHZNBYUSERROLEH | BASIC | Project Authorizations by User Role |
| I_PPM_AUTHZNUSERFINANCIAL | BASIC | Financial Authorizations of PPM objects for logon user |
| I_PPM_TASKSEARCH | BASIC | Task data for Enterprise Search consumption |
| P_PPM_AUTHORIZATIONBYUSERROLE | BASIC | PPM Object Authorization for a user by role assignment |
| P_PPM_AUTHZNUSRREADJOIN | BASIC | PPM Object Authorization for a user via database join |
| P_PPM_INHERITEDAUTHORIZATION | BASIC | Authorizations for PPM Objects without Activity Resolution |
| P_PPM_LOCALAUTHORIZATIONS | BASIC | Local Authorizations (Activities not yet resolved) |
