How to find missing Auth Objects in SAP Security

A user reports of getting 'Missing Authorizations' related messages and you need to find out the missing objects.

If the question involves many messages involving missing authorizations then I would first create a test user copying the user with the issue and:

1. Execute Transacation ST01 (i.e. ST'ZERO'1) for System Trace
2. Check mark the box next to Authorization check under Trace Components
3. Click on General Filters
4. Enter the user name in 'Trace for user only' field
5. Click on Green 'Back' icon (next to red 'X') or press F2
6. Click on 'Trace on' (next to Refresh)
7. You will see 'Trace Status:' changed as 'Trace switched on (main switch on)
8. Now recreate the issue, i.e. perform the steps by which the user was getting those 'Missing Authorizations' related messages, either in SAP GUI or in Web UI
9. Once you execute the very step, after which you get the messages in question, go to ST01 and turn the Trace off, i.e. click on the next button to Trace on
10. Now click on Analysis
11. Select the user name (by default it will be the user that you are logged on to SAP GUI with)
12. Check the correctness of the time, i.e. From: and To: fields
13. Remove the Table Restrictions and enter '*' instead
14. Uncheck all Trace Records except Authorization Check
15. Click Execute
16. Now you should see a Trace Display in which you will several columns with line items with different Green shades..Dark and Light green..
17. Among the columns displayed you will see the fourth column with Authorization Object and RC (Return Code)
18. Find the objects with non-zero RC and you should see the missing authorizations
19. This you can use to modify the existing role accordingly and reexecute the steps to see if the Missing Authorizations related messages appear again.