Answer / naveen kumar

As a part of a security the functional consultant must give
wht r the tcode that are to be secure and not to be given
to end user depending on that we perpare a matrix

and then we create a role for the each indiviual matrix

assign to end user according to there business requirement

and thus we restrict the user for using of critical tcodes

we should not give SAP_All,SAP_NEW profiles to any user
inthe oragnization until unless told if u also give put a
trace on for that particular user id

Answer / chandu

First we are checking that t-code is critical tcode
Or not . After we take approval from our manager
Then. We are not assign tcode directly,
We create one role then we assign to role
That team..

If am wrong , correct me

what is the procedure to delete a role?

6 Answers   Cap Gemini, IBM, iGate,

---

How we schedule and administering background jobs?

0 Answers  

---

One of the user logged into Production System, changed a table and then logged out. How will you track him?

2 Answers   Atos Origin, Infosys,

---

what is difference between se16 and sm31?

1 Answers  

---

in which table we can find all authorization groups

5 Answers   Cognizant,

---

How to create user in SAP without giving LASTNAME and INITIAL PASSWORD ?

2 Answers   Accenture,

---

Tables so far used?

1 Answers   IBM, TCS,

---

What is fire fighter ? When we are using fire fighter?

4 Answers  

---

i need to give authorisation to a user to su01 tcode but the delete options should not work..i,e the user should be able to Create,disp,change etc but not delete on su01. how cam i do this?

5 Answers   Accenture,

---

A user has roles that only give display access but he can still change something in the system. how?

6 Answers   Atos Origin, IBM,

---

The system raised a message that authorizations are missing but you have SAP-ALL. What would you do?

3 Answers  

---

what is sox and in sap security?

2 Answers   IBM,

---