Answer / itsgaurav151

The things ECC security and RAR security are different. ECC
is a system whereas RAR is a tool. ECC security involves
securitg data, t-code access, report access and maintaining
the suthorizations. RAR(Risk analysis and Remediation) is a
tool that is used for analysis of risk analysis and its
remeduation as name suggests. Rhis tool determines all
potential risks that arises if a t-code/object/role/auth is
assigned to a user. Also this tool helps to remediate that
risk using mitigation technique.

Answer / rahman shaik

Simply we can say one thing like In Ecc system you cant find any risk while assigning the roles but in RAR tool it will check the RISK of that particular assignment and if risk is their then we can mitigate and simulate to that risk

I mean its purely for SOD(segregation of duties)

What does the account assessment category specify in a purchasing requisition in SAP Materials Management?

0 Answers  

---

What does the item category specify in a purchasing order in SAP Materials Management?

0 Answers  

---

one tcode,say sa38, is assigned to 10 diffrent users through a same role.I want to restrict one of those 10 users to execute only a few reports in sa38 but not all reports.what are the possible ways of getting it done?

3 Answers   Cap Gemini,

---

i have one role in development then this role need to be available in production how to achieve this?

5 Answers   Infosys,

---

List the various user types.

0 Answers  

---

---

As a SAP security consultant what is the most challenged you faced in previous company?

0 Answers  

---

how we Set up Central User Administration (CUA) to manage 4 systems/clients

0 Answers   IBM,

---

What is a Role in Sap Security and Types of Roles and use of the role?

2 Answers  

---

what is the procedure to delete a role?

6 Answers   Cap Gemini, IBM, iGate,

---

What is the Functionality difference between ECC 5 and ECC6? i.e. new functionality in ECC6 which is not in ECC 5.

0 Answers  

---

What is the benefits of ticketing tool?

1 Answers   IBM,

---

1).what is the diff b/w adding the tcode in s_tcode authorization object and addind the tcode inmenu tab of pfcg? 4) What is the difference between Owner, Controller and Administrator in Firefighter? 2) Can you tell me why do you use S_TABU_DIS authorization object? 3) Explain How do you restrict a particular table acces then? 5)In RAR ,What are the default Back ground Jobs? 6)Which job will update all user master records? 7)What will happen whenever we execute a t-code? 8)What is the purpose of the report RSUSR006? 9) Lets say a user is locked by admin? What value will you see in USR02 table and in UFLAG column? 10) What will you do if the user complains that he is not able to access a t-code? 11)why we have to delete users ? 12)a. What is Direct role assignment and indirect role assignment? b. What is the process of adding a t-code to an existing role? c. If client asked you to modify a role directly in PRODUCTION for emergency? Is it possible? What you will do in that situation? d. What is the purpose of customized Transaction codes? Have you created any custom t-codes? 13)

3 Answers   IBM,

---