Answer / gaurav.s

Guys you were wrong..a single role without a profile can
also be assigned to a composite role.Basavaraj, i was
looking for a technical reason for this behaviour. Well i
have explore it myself and the correct answer is :

What prevents you from adding a composite into a composite
is that within PFCG is a validation provided through
Function Module PGRN_CHECK_COLLECTIVE_AGR. That FM checks a
few things, one of which being that for the inserted role,
it is not a collective (composite) role defined
via table AGR_FLAGS field COLL_AGR=X.

Join SAP Security Group on Facebook :
https://www.facebook.com/groups/sapsecindia/

Answer / sandy

Because composite roles does not have profile.

Answer / basavaraj

composite roles are created for a particular module/group.
we cant pute one module/group into another module/group.

how to lock the client?

3 Answers   IBM,

---

whts the differents between SoX ,SoD??????wht kind of work Sox do as wel .....SoD do? whts is virsa??????? and VRAT,,,,VFAT,, how it workin security.

3 Answers   IBM,

---

How can I find List of users in system who dont have any role assigned (Role Tab Blank) but created in system ?

5 Answers   Patni,

---

how do we test security systems.what is the use of SU56

2 Answers   GE, IBM,

---

What are the steps involved in SAP Security upgradation projects and also in SAP security impletation projects

0 Answers  

---

what is authorization object and authorization object class?

0 Answers  

---

Mention different tabs available in pfcg?

1 Answers  

---

Please provide me defination for the follwing objects.  S_user_GRP S_USER_AUT S_USER_AGR S_USER_PRO S_USER_SYS S_USER_SAS

1 Answers  

---

Hi Everyone, can anyone suggest the best institute in Ameerpet, HYD for SAP Security Course. Thnks Ankur

10 Answers  

---

1) Explain different type of Users? Explain specifically Service User? 2) Difference between System and Communication User?Explain in Context of Profile Parameter? 3) There are 5 systems say BI, SOLMAN, CRM, PI, SRM etc etc. Which system will act as a satellite system in CUA and Why? HOw CUa system works? 4) State different types of Transactions & Tables in Strutural Authorization Profile in HR Security? 5) What is L0 , L1 , L2 , L3 , L4 code called in HR Security? 6) What fields are required to create Strutural Authorization Profile in HR Security? State significance of Evaluation Path? 7) What is Structural Authorization Profile in HR Security? When required Role has already been assigned to User then why Structural Authorization Profile is required by user? 8) How are structural Authorization Profile are created? 9) Important Authorization Object in HR Security? 10) Fields in P_ORGIN A.O? 11) Important infotypes and What is PA? 12) How access is provided for tables to user? Significance of Authorization Group in TDDAT table? 13) Difference between SU22 and SU24? 14) Explain Authorization Structure? 15) Which table stores the Authorization Object of a User? 16) What we do to keep Roles consistent in DEV QAS and PRD? 17) A User has create and display access? Will he have access to change as well? 18) How User can have access to view salary slip of other employees(HR Security)?Explain in detail. 19) In HR security does we add Employee ID anywhere in Roles? 20) Any issue you have faced while Transport? 21) Have you faced any issue in Upgrade? Expalain how to compare Roles from older version of SAP to new version of SAP? 22) Any typical issue you have resolved in HR Security?

0 Answers   ABB, CSC,

---

why do you think keylabs is best inistitute in bangalore for sap security, I am looking for sap security training with GRC, do u suggest keylabs or any other inistitute

5 Answers  

---

How many profiles we can add to role and if already user has 312 profiles the, how will you provide more profile to user?

2 Answers   Cap Gemini,

---