S# / variousBasisSU53ST01SU01PFCG
You are not authorized to ...
What it actually means
Your user is missing an authorization object value needed for what you just tried to do.
Why it happens
- Your role does not include the transaction, or includes it without the right organizational values (company code, plant, sales org).
- The activity is missing (you can display but not create/change).
- A role was assigned but the user buffer was not refreshed, or the role assignment is not yet valid by date.
How to fix it
- 1Immediately run SU53 — it shows the last failed authorization check, including the exact object and values.
- 2For intermittent or complex cases, run an authorization trace with ST01 (or STAUTHTRACE).
- 3Send the SU53 screenshot to your security team; it tells them precisely what to add.
- 4If a role was just assigned, log off and back on so the user buffer refreshes.
Stopping it happening again
Test new roles against real end-to-end processes, not just transaction access.
Still stuck on this one?
Paste your exact error into the Issue Investigator and get a walkthrough for your situation.
Automate & Graduate is independent and not affiliated with or endorsed by SAP SE. Message texts and behaviour vary by release and configuration.