Answer / prakash

SU53: Will give the screen shot last missing authorization
of the details for the user ID

ST01: Some times SU53 will be wrong, using ST01 will
perform the trace activity will check for authorization
checks for user ID

SUIM: This will used to pull out the authorization reports

usually, we will use this tcode by analyzing the out put
results of SU53 and ST01 and will be inputs for SUIM to
pull out authorization reports

Answer / chakravarthy

SU53- Authorization analysis
ST01- Trace
SUIM- Reports
ST22 - ABAP dump analysis

what is difference between master role and derived role

3 Answers   IBM,

---

what is central user administration?

1 Answers  

---

Give an example of SOD with object level control & also decide the Risk implication from the Technical standpoint.

0 Answers  

---

what is the difference between PFCG,PFCG_TIME_DEPENDENCY&PFUD???

3 Answers   IBM,

---

How can I do a mass delete of the roles without deleting the new roles?

0 Answers  

---

How we Assigning roles to users positions in HR, troubleshoot access issues

2 Answers   IBM,

---

What is the difference between authorization object and authorization object class?

0 Answers  

---

why do you think keylabs is best inistitute in bangalore for sap security, I am looking for sap security training with GRC, do u suggest keylabs or any other inistitute

5 Answers  

---

1).what is the diff b/w adding the tcode in s_tcode authorization object and addind the tcode inmenu tab of pfcg? 4) What is the difference between Owner, Controller and Administrator in Firefighter? 2) Can you tell me why do you use S_TABU_DIS authorization object? 3) Explain How do you restrict a particular table acces then? 5)In RAR ,What are the default Back ground Jobs? 6)Which job will update all user master records? 7)What will happen whenever we execute a t-code? 8)What is the purpose of the report RSUSR006? 9) Lets say a user is locked by admin? What value will you see in USR02 table and in UFLAG column? 10) What will you do if the user complains that he is not able to access a t-code? 11)why we have to delete users ? 12)a. What is Direct role assignment and indirect role assignment? b. What is the process of adding a t-code to an existing role? c. If client asked you to modify a role directly in PRODUCTION for emergency? Is it possible? What you will do in that situation? d. What is the purpose of customized Transaction codes? Have you created any custom t-codes? 13)

3 Answers   IBM,

---

1.How do I assign roles to a specific group, not to a specific user, and apply the roles to all users in that group? This particular group has four users.?

3 Answers  

---

If we delete a Role can we transport it, if yes then how?

1 Answers   IBM,

---

What is the maximum number of authorization in an object?

1 Answers  

---