Answer / jeevansukka

if we make changes to the exisiting role, then access will
be changed to the rest of the users also,hence as per my
knowledge, the best way is to maintain a seperate role to
restrict the access and provide it the user, who has to be
restricted.

Answer / vikas srivastava

Report can be secure by authorization object S_PROGRAM
S_PROGRAM has two field P_Action and P_Group
P_Action cab have these values:
SUBMIT: Start the program
BTCSUBMIT: Schedule the program to run as a background job
VARIANT: Maintain variants.

P_Group requires authorization group which is attached to
report by this way we can restrict a report to access.

Answer / rax

Hi all,

Generally all roles (containing t-codes) are planned and
created depending on an individuals position (ex- sales mgr)
during implementation. So, the above situation never arises.

According to me this question is just to know the
interviewee's knowledge....

For this particular scenario the answer would be ....
The end user to access reports or programs he needs to have
access to authorization object S_PROGRAM. So,we first
manually add this authorization object to his existing role.
This object has an authorization field called AUTHORIZATION
GROUP in which we can maintain all programs or reports he
has to be given access to....

Difference between 4.7c and ECC 6.0 in security aspect? I tried in many website but still not able to find the correct one.

2 Answers   CTS,

---

SAP GRC 10.0

1 Answers  

---

Explain how you can lock all the users at a time in SAP?

2 Answers   IBM,

---

Mention which t-codes are used to see the summary of the authorization object and profile details?

1 Answers  

---

How to create a simple or single role.?

2 Answers  

---

can u tell me some of the password related parameters ?

5 Answers   IBM,

---

How can we find out the roles that got directly generated into Production & not imported from Quality System? Please note, you don't have any Quality user id.

3 Answers  

---

what is the difference between su25 & su24 , when we can make the authorization checks in su25 then what is the use of su24

2 Answers  

---

what is difference between se16 and sm31?

1 Answers  

---

what is temp role and copy role ?

5 Answers   Accenture, TCS,

---

how do we get list of users who are having mail-id’s in SU01 (Address tab)

4 Answers  

---

How we Provided Security design, configuration, and support for SAP Enterprise Portals

0 Answers   IBM,

---