Answer / itsgaurav151

Change mode : If a new t-code is added to a role it will pull the auth obj corresponding to that t-code but not any of those which was deleted by us earlier, provided that obj is not related to newly added t-code. Or we can say that change mode will compare the auth in the role for newly added t-code with su24 and and will add all the necessary objects.

Expert mode : it have three options .
1. Delete all auh and create new profile- it will delete all auth data except org level and we have to create new authorizations in role corresponding to all t-codes in role.
2.Edit old status - it will give u chance to edit last saved authorizations only, no matter if u added any t-code to role. it will not pull the auth obj for new t-code from su24.
3. Edit old status and merge with he new - this will compare the auth of all t-codes in role with the records in su24 and will pull the objects corresponding to newly added t-code as well the missing object for any other t-code present in role and was deleted earlier.The newly pulled auth objects are marked as new and old ones are marked old.The auth objects in which auth values are added/changed gets the staus updated.

Answer / keerthishree

When we change/update Su24, then we need to select expert mode [read old data and merge with new data] to reflect su24 changes into the role corresponding to auth obj of effected tcode [tcode which are added in menu tab of PFCG role]. In case we select Change authorization option to edit, then we miss SU24 update in the role and its a big mistake. hence Change authorization option is not recomended one

How to find out who has deleted users in the system?

0 Answers  

---

what is sap security?

1 Answers  

---

Hi Everyone, can anyone suggest the best institute in Ameerpet, HYD for SAP Security Course. Thnks Ankur

10 Answers  

---

how to we Assigning Portal groups for Business users in BI

1 Answers   IBM,

---

a user is assigned with tcode SA38.how to restrict him to execute only a few reports,say rsusr003.

4 Answers   iGate,

---

What is fire fighter ? When we are using fire fighter?

4 Answers  

---

How to create a simple or single role.?

2 Answers  

---

What is difference between two sentences 1: " Using SUGR we allocate user to group ". 2: " In SU01 in Logon data we assign user to group " So, What is assigning and allocating ?

3 Answers   Patni,

---

In SU53 screenshot , there are missing authorization. How you come to know that these are the relevant Roles in which we have to add these objects? Decision not SUIM

1 Answers   IBM,

---

How many Single roles can be added in one Composite role ?

3 Answers   Patni,

---

In Agr_1251 we are able to see 100 roles but in SUIM we are able to see 120 roles what's the reason behind this ? why is the difference between the SUIM and the AGR table ?

0 Answers  

---

Hi Friends, I am sudheer from Hyderabad. i am looking for the training on SAP SECURITY GRC. KIndly let me know what are the best institute to learn in ameerpet area for this. Thanking you in advance.

6 Answers  

---