Answer / dinesh

the basic defination of Role in layman is just a container
which contains transactions, authorizatoins and instances
of authorization objects, the actual authorization is saved
into profiles, thats why we always need to generate a
profile to complete the role.
when we remove or delimit a role from user buffer through
role tab in su01/10, the profile gets deleted for that user
that means all authorization contained in profile deletes
from user buffer however the actual container remains empty
that is the Role.
hope this clears your doubts and question about roles and
profiles.

Answer / ashwini

Using PRGN_COMPRESS_TIMES prog u can delete the expired role
from user id.

Red, Yellow, Green in PFCG significance? Can we generate red Roles in PFCG and assign it to Users?

3 Answers   IBM,

---

Is it every login FFID notification goes to controller?

2 Answers   TCS,

---

what are the issues you faced with UME?

0 Answers   iGate,

---

SU24 must be set up before implementing any roles. A. True B. False

2 Answers   Cap Gemini,

---

What is the Organization level?

3 Answers   IBM,

---

---

What are su53 t-codes used for?

0 Answers  

---

Could any one tell me "What is critical authorizations in sap security"?

6 Answers   Accenture,

---

While run the risk analysis fir two user & its showing blank screen and other users its working fine , whats the reason?

5 Answers   TCS,

---

what are the prerequisites we should take before assigning sap_all to a user even we have approval from authorization controllers ?

1 Answers  

---

i have one role in development then this role need to be available in production how to achieve this?

5 Answers   Infosys,

---

I want to give access to sec admin for assigning roles to users, but self assignment should not be possible . how it is?

1 Answers  

---

Can we delete a Role and transport it?Explain How?

2 Answers   IBM,

---