Answer / parthu

READ CAREFULLY QUESTIONS AND THERE ANSWERS BELOW.


1.How to get the E-Mail address for 100 users at a time.
ANS: scatt script

2.While Creating BW roles what are the Authorization
Objects we will use.
ANS: s_rs_auth, s_rs_icube, s_rs_odso , s_rs_mpro,
s_rs_ipro, s_rs_admwb (for BI consultants & admins) and
s_rs_rsec (for BI Security consultant)

3.While Creating Single role what will be happened in the
functional side, when entered the Template role in the
derived role tab.
ANS : Don't NO

4.when we changed the password for more users(for
example:100 users)
ANS:
a) at the time of implementation we create users & PWD
b) depend on business users requests
c) if locked users needed to unlock and make them use then
we generate new PWDs.
d) monthly or quaterly basis we send a message to endusers
to change there PWDs.
e) users got locked due to incorrect log on.
f) users locked with the expiration of there user ids.

5. (A) where the password will be stored (B)from where you
can Re-Collect the password and (C) how will you
Communicate the password to all users at a time.
ANS:
A) PWD information will be stored in table USR02.
B) There is NO re-collect password process in SAP again
user needs to send request to security team to re-issue new
PWD
C) we can do it through scatt script.

6.What is Virsa? Once you entered in to the screen what it
will perform.
ANS: Before GRC comes into picture there were other tools
which are running in the market in order to do analysis.
those are VIRSA and APPROVA. both are an INDIAN Companies
and VIRSA developed Tools like Firefighter, Compliance
Calibrator, Access Enforcer and Role expert to do risk
analysis but In the Year 2006 VIRSA took over by SAP and it
changed names as Superuser Privilage Management (SPM), Risk
Analysis and Remediation (RAR), Compliant User Provisioning
CUP) and Enterprise Role Management (ERM) respectively.

Virsa FireFighter for SAP: enables super-users to perform
emergency activities outside the parameters of their normal
role, but to do so within a controlled, fully auditable
environment.The application assigns a temporary ID that
grants the super-user broad yet regulated access & tracks
and logs every activity the super-user performs using that
temporary ID.

7.What is the use of SU24 & SM24.
ANS: There is no SM24 t-code in SAP. coming to SU24, here
we can maintain the assignment of Authorization Objects by
entering into particular t-code and we can check the
relation between the t-code and concern authorization
objects and we can make changes according to business
needs. it means maintain Authorizations and its fields and
field values.

8.While Creating Single role what will be happened in the
functional side, when you entered the Template role in the
derived role tab.

QUESTION IS NOT CLEAR

9.What is Dialog users, Batch users and Communicate users.
What is the use with Communicate user.
ANS:
Dialog user is used by an indiviual to do all kinds of log
on.
Batch user is used for Background processing and
communication within the system.
Communicate user is used for external rfc calls. (across
the systems we can connect)

10.Can we add one Composite role in to another Composite
role at any urgent user requests or in normal user
requests.
ANS: We can not add a composite role into another composite
role but we can add multiple derived roles into one
composite roles.

11.In Transport what type of Request we will use.Why don't
we use workbench request in transport.
ANS: most of the time we do transport workbench and
customized requests. 95% we do customized transport as we
do settings,configurations,creation etc at DEV system and
transport them to QUA or PRD systems.
settings,configurations etc are done by BASIS,Security and
Functional consultants then those will be treated as
Customized and if ABAPers do programs and packages etc and
transport them then those will be treated as workbench.

12.When we added Authorization Object in Template role, at
the same time what will be happen in Derived role.
ANS: Template Roles will be provided by default by SAP
while we do implementation (install SAP).when we want to
have template role we should not use that role directly,
instead of that we can go for COPY option and we can copy
it and do customize according to our business needs.

13.How to Check Profile parameter. And how to find whether
any transport has ended with error and where we can check.
ANS: T-code RZ10 to check Profile Parameter & T-code STMS
we can check the Transport error logs. click on Import
Overview (Truck icon) in STMS screen and in next screen we
have options like : Import Monitor, Import Tracking and
Import History.... these will show the transport issues.

14.How to Extract users list like who didn't login since 3
months. And In 90 Days user Locking in which table we will
use.
ANS: T-code SUIM : Users -> Click on By Logon Date and
password change -> Give * in user and give 90 days in
No.days since last logon and check Locked users and then
EXECUTE.

(OR) RSUSR200 report to get info

15.What is OSS Connection and System Opening and why we
have to open these.
ANS: OSS means Online Service System where SAP is going to
give Service to R/3 Users.

16.What will have in one single role and how many prifiles
will be in one sap cua system.
ANS: Single role will contain T-codes, Reports and URL's,
Profiles and Users. Max profile are 312.

17.What is the difference between Template role & Derive
role.
ANS: Template role is nothing but a default role provided
by SAP. this template role might be a single or composite
or derived role. template roles are not generated profiles
or authorizations nor assigned to users and org levels are
not maintained.Derived role is nothing but a single role
and its derived from a Master role and can restrict org
levels and can assign them to users.

Answer / chandrana

1.How to get the E-Mail address for 100 users at a time.

Ans: To get email address of the no. of users go to se16-
>ADR6->give the person number or Address number.

To get the Addres number or Person number go to the
tableUSR21 extract the data of the users.

Answer / karunakar

Hi Friend,
5 . Virsa is a company which was developed the tools like
Compliance calibrator , access enforcer, Role expert, fire
fighter, from above some of the tools are used for security
operations like risk analysis ,

6. su24 we use this t code to know the relationship between
tcode and authorization object an also we maintain the check
indicators for the t codes and we need to maintain them in
authorization tab of pfcg,

10. it is not possible to add one composite role to another
composite role,

11. there are 4 types of TR 1.customizing TR, 2.WB TR,
3.Transport of copies 4.Relocation of objects

14. we can extract the user with RSUSR200 who are not logged
in for last 3 months, the table is USR02 Field UFLAG, if the
value is 64 then the user is locked,

17. Template role is a role which is sap standard role it
contains all authorizations and t codes defined by sap,
derived role is a tole which created from the parent role ,
we create the derive role to restrict the role to some org
levels,

Please let me know if i am wrong

Any details about secatt apart from SAPSecurity online.com?

0 Answers  

---

What does the profile generator do?

0 Answers  

---

what is transaction variant?

1 Answers   TCS,

---

Can you explain document transfer-level security?

0 Answers  

---

Can we delete a Role and transport it?Explain How?

2 Answers   IBM,

---

---

1).what is the diff b/w adding the tcode in s_tcode authorization object and addind the tcode inmenu tab of pfcg? 4) What is the difference between Owner, Controller and Administrator in Firefighter? 2) Can you tell me why do you use S_TABU_DIS authorization object? 3) Explain How do you restrict a particular table acces then? 5)In RAR ,What are the default Back ground Jobs? 6)Which job will update all user master records? 7)What will happen whenever we execute a t-code? 8)What is the purpose of the report RSUSR006? 9) Lets say a user is locked by admin? What value will you see in USR02 table and in UFLAG column? 10) What will you do if the user complains that he is not able to access a t-code? 11)why we have to delete users ? 12)a. What is Direct role assignment and indirect role assignment? b. What is the process of adding a t-code to an existing role? c. If client asked you to modify a role directly in PRODUCTION for emergency? Is it possible? What you will do in that situation? d. What is the purpose of customized Transaction codes? Have you created any custom t-codes? 13)

3 Answers   IBM,

---

what is the difference between customizing request and workbenchrequest?

3 Answers   Deloitte, Tech Mahindra,

---

what are the profiles that are related to transports ? what are the A.O related to transports ?

3 Answers   IBM,

---

While run the risk analysis fir two user & its showing blank screen and other users its working fine , whats the reason?

5 Answers   TCS,

---

Can any one tell me briefly , what is the roles and responsibilities of SAP BASIS Security Administrator..

2 Answers  

---

What are pfcg t-codes used for?

1 Answers  

---

1 How many tickets usually get per day/month in support ? 2 what is the major ticket in your experience ? 3 what is the tool you are using in your company? 4 in situation we will use Derive roles in support project? 5 One User asked me the TCODE access in support project,he got approvals from all,so shal i create new role or can i add that TCODE in his roles? 6 what is ROLE OWNER? 7 What are the daily activities in your Project ?

2 Answers   ADI, AXA, TCS,

---