Answer / subal

Hi ,

this is Subal from Accenture.
ST01 is mainly used to trace user's authorization access.
When we can not make out [by use of SU53]what is missing
for a particular user that he can not access certain things.
We use ST01 to trace the user's action and thereby find out
missing authorizations.

Steps:St01
check authorization check
click on general filter and give user whose trace you want
click on Trace On
save the setting.
---------------------------
Now ask the user to perform the task he was doing --and
complained for missing access.
after his complation
----------------------
Come to st01 again
click on trace off [this is very important to turn it off]
click on analysis button -->give the from date&time and to
date&time accurately.
execute
you will get detailed description of users action with
missing auth [that come with rc >0]

------------------------
note those auth obj and field for which user had issue.
find role and assign the user to give needed access.
--------------------------------
I think this is detailed enough.....

Regards,
SUBAL

Answer / prakash

Hi,
I partially agree with Subal, need to follow below 2 points
before performing all the steps mentioned above by Subal.

- First we need to check in which application server user
has logged in.
- Using SM51 tcode, you need to login same application
server where user logs in.
- Then perform trace activity

How see hierarchies in BI security

1 Answers   IBM, L&T,

---

What are the issues will face while creating user in the system ?

8 Answers   Accenture,

---

How many Tcodes can be assigned to a role ?

1 Answers  

---

Which transaction code is used to display the user buffer?

0 Answers  

---

whats the meaning of relocation in transport request ?

1 Answers   TCS,

---

What is the difference between Execution and Simulation in grc rar

1 Answers   IBM,

---

If we delete a Role can we transport it, if yes then how?

1 Answers   IBM,

---

SAP GRC 10.0

1 Answers  

---

what is the table to find out roles for which profile are not genarated and genarated.I mean to say table to find the roles in which the authorization tab is green and roles in which authorization tab is red.

2 Answers  

---

1) Explain me about your SAP Career? 2) Tell me your daily monitoring jobs and most of them you worked on? 3) which version of SAP are you working on? Is it a java stack or abap stack? 4) Tell me about derived role? 5) what is the main difference between single role and a derived role 6) Does s_tabu_dis org level values in a master role gets reflected in the child role?? 7) Tell me the steps to configure CUA? 8) Is RAR a java stack or Abap Stack? 9) What is the report which states the critical T-codes? and also What is the T-code? 10) What is the T-code to get into RAR from R/3? 11) Explain about SPM?

2 Answers   TCS,

---

As a SAP security consultant what is the most challenged you faced in previous company?

0 Answers  

---

Users are lockdown from past 3 -4 months. Which table is used to know that which users are lockdown?

3 Answers   IBM,

---