Answer / sarathy

First & for most important thing is to find out weather the
user is really need that tcode which he wanted us to assign.
Need to take a permission from there concern project manager
and if he approves it then only we need to assign the tcode.

1st option is creating new single role with that particular
tcode and assign it to that user.

2nd option is the above procedure by running SUIM t-code and
check the particular role which can fulfill the needs of
that user. but before assign it to the user we need to take
a permission from that ROLE OWNER. if he approves then we
can assign that role by using SU01 tcode. Hit SU01,Login
with that users and goto Roles TAB and assign that role to
him and SAVE.

Now he can able to run that TCODE.

Answer / naveen

first we have to check if user has access to particular
tcode. If not then run suim with roles by complex selection
criteria -->put object1 as S_tcode as the required tcode
and hit execute button. the query will fetch you a result
of roles. Select a role that has minimum authorization and
satisfy the user requirement. and assign the role to user.

Answer / kondreddi.raghu

1.First we need to check that Tcode in which role it exists.
2.Check for the roles which user already had.
3.Suppose User belongs A2R related.We need to send a mail to concerned Bussiness approver for suggestion.We need mention everything in that mail like who is the user ,What roles he is having at present in which roles the mentioned tcode exists.
4.Suppose if requested tcode exists in finance related role he may suggest to provide that role access (It's one kind of Scenario) . At the same time he may suggest us to add the tcode in any one of the existing user finance related roles(2nd Scenario) . SOme time he may not agree to give that access to that particular user as his designation doesn't match to use that particular Tcode.
5.Once you got approval to add in any one of his existing roles.Then as usual you will make changes to that role in DEV and create a test user Id and send it to that user for testing. Once testing is successful move the transport to QUA(quality). From there transport will move to PROD by STMS team.

Answer / munisankar naidu

ROLE MEANS SET OF PROFILES

PROFILE MEANS SET OF AUTHORIZATION OBJECTS

AUTHORIZATION OBJECTS MEANS SET OF FIELD VALUES

Answer / nisha kharade

using PFCG tcode you can assign role

what is difference between master role and derived role

3 Answers   IBM,

---

In an environment of derived roles ; a user is asking for a t-code ; which is not found in suim in search of roles ? what will u do ?

4 Answers   IBM,

---

why we are assigining only 312 profiles to the user

1 Answers   CTC, SAP Labs,

---

In SU53 screenshot , there are missing authorization. How you come to know that these are the relevant Roles in which we have to add these objects? Decision not SUIM

1 Answers   IBM,

---

what is transaction variant?

1 Answers   TCS,

---

---

Q6) When do you get a screen for " maintaining the authorization values for org elements " in PFCG ??? (i.e..screen you get thru PFCG --> AUTHORIZATION tab --> CHANGE AUTHORIZATION DATA --> SCREEN FOR MAINTAINING ORG ELEMENT VALUES )

3 Answers   HP,

---

for eaxmple we are creating Z-Tcode How to restrict and what level are restict.

1 Answers   Hexaware,

---

You want to remove a developer's and developer keys from a system. How would you do that?

0 Answers  

---

what is the main difference between the derived role and a single role?

0 Answers  

---

i need to give authorisation to a user to su01 tcode but the delete options should not work..i,e the user should be able to Create,disp,change etc but not delete on su01. how cam i do this?

5 Answers   Accenture,

---

different b/w Direct assigment and indirect role in bi security whn will go direct assignment

2 Answers   CTS,

---

hi tel me what is the use os SNC tab page in su01, and how to configure it , give me example for this,and how it can used in real time

2 Answers  

---