The main transaction code for working with authorization objects in SAP is:
SU21 – Authorization Object Maintenance
This tcode lets you display or create authorization objects used in role-based access control.
If you want to check which objects are in a role, you'd use:
PFCG – Role Maintenance
