Answer / shankar

hi..
here 1st sentence meaning is...
we are creating a user group
here the main logic is we creating a group as user..
we can allocate no. of users to this group.
2nd sentc is..
in su01 we can create a user and assign this user to
particular group.. that may be abov created user group.
this assigning user to user group.
assining : we are assining some of users to one usr group
allocating: we are allocated the user as a user group

Answer / shanu

By assigning SAP users to user groups, the task of user
maintenance can be distributed to different user
administrators. The system administrator then only assigns
each user administrator the authorization to create and
change users in a group.

Answer / rajesh srisailapu

Hi ,

The difference between two sentences is

1: " Using SUGR we allocate user to group ".

By using SUGR ,we can create and allocate user group to
number of users at a time, this is for find the list of
users of a particular user group but we cannot restrict any
user to any region or any location.

2: " In SU01 in Logon data we assign user to group "

If we assign any user to User Group in Logon data of SU01,
then user will restrict to particular user group or region
or location. Whenever user trying to do any activity other
than this user group, then system will show “You are not
authorized to "XXXX user group.” Even though user have the
access for particular activity.

Ex: Let us assume some ABC Project, its having multiple
locations like India(SEC_IN), China (SEC_CN), Australia
(SEC_AU)…etc. Each location having individual security
admin with respective user groups. Now India security admin
trying to do password reset to any cross country user like
China user(as per urgency/requirement)then system will
show “You are not authorized to reset password
to “SEC_CN” user group.” Because India security admin is
assign to SEC_IN user group. like this way we can restrict
the users with User Group in Logon data of SU01.

This is the main deference between two sentences “Using
SUGR we allocate user to group and Using SUGR we allocate
user to group”

Explain how you can lock all the users at a time in SAP?

2 Answers   IBM,

---

1. what is the difference b/w change authorization mode and expert mode. 2.when we do the user comparison in pfcg what is the difference in complete comparison and expert mode comparison. 3. what are the critical auth objects in security point of you , 4.when we do the transportation of composite role what will happened . 5.while doing the kernel upgrade we download the executable s one by one are all together. 6. while applying the patches what is the importance of test import why we do test import

2 Answers   IBM,

---

in how many roles a T-code exists? Find it without se16 or suim

10 Answers   IBM,

---

What is the maximum number of profiles in a role and maximum number of object in a role?

0 Answers  

---

Authorization check on s_btch_job failed. What would happen now?

0 Answers  

---

How can I do a mass delete of the roles without deleting the new roles?

0 Answers  

---

SU24 must be set up before implementing any roles. A. True B. False

3 Answers   Cap Gemini,

---

1)What does the Profile Generator do? 2)What is the main purpose of Parameters, Groups & Personalization tabs 3)in SU01? purpose of Miniapps in PFCG? 4)What happens to change documents when they are transported to the production system? 5)what are the issues you faced with UME? 6)what is the Ticketing tool that you are using in your organisation?and explain? 7)what do you know abt LSMW? 8)Difference b/w su22 and su24 ? 9)what is the landscape of GRC? 10)What is the difference between Template role & Derive role?

4 Answers   TCS,

---

How to restrict Table access in SAP?

3 Answers   Infosys, Wipro,

---

Explain transport system-level security?

0 Answers  

---

how we Restrict the auth groups for table maintain, creating Auth group using SE54 to built new Auth groups to restrict tables via auth object S_TABU_DIS

0 Answers   IBM, SAP Labs,

---

If user says he don’t have authorization then how to proceed?

3 Answers   IBM,

---