Answer / bishnu lal sahu

When we save a profile that we only save the values
whatever changes made in authorization object but still it
is not working due to non activation of authoriztion
profile.

A generate button used to activate all values and create a
authorization profiles.

Because we can't assign authorization directly to the user
that's why we generate a authorization profile.

Answer / ukh

=> difference between Saving and Profile Generating?

Saving a profile is very similar to saving a regular program
and generating a profile is very similar to compiling a
regular program, hoping that you wrote a program sometime in
your life.

Say you are working on a profile and you have not finished
it completely and now you have to go away for 1/2 day (for
any reason), what will you do? Before you log off, if you do
not save your work, you will lose all the work you did so
far working on the profile. So, basically you will save it.
This does not mean it is ready to use. That also means it is
not active.

Now you come back to work, go into the earlier profile, and
now finish it completely and now you are ready to assign it
to the users. Here, you will have to "generate" the profile
and now the profile is ready for user assignment.

Answer / jagadish

hai this is jagadish

if you not generate profile name before u chage the
authorization then it ask a profile name when u save and
generate in authorization tab. and when we generating the
profile after save then the profile is save with the given
authorizations and activities and et... in database. One
thing u understand that any authorization or activities are
stored in a profiles and when we assign them then the
profile name takes place in user master records. ok


if i am wrong in this correct me any of this group

byeee

jagadish

Answer / qrueshi

While saving profile means just we are saving in to dummy
space it has no effect

Due to generating profile we are activating the
authorization which is maintained

Only difference is if you just saved then it is not
activated status i.e Deactivated status

when you genarate it it will change the status into working
status or activated status

Answer / shanti.s

If we do any modifications or If we create any role and
maintain authorization fields and values we will save those
changes. That means wht changes we have made that will be
saved. If we generate profile means it wil generate
profiles according to tcode and authorizaion objects you
have maintained in that role.That profiles wil remain in
user master records...

Thanks
Shanti.

Answer / kishore kumar vuthpala

After maintaining the authorizations in accordance with the
policies of your company, you can generate the
authorization profile. It is only then that the
authorizations contained take effect.
During the generation, the Profile Generator collects all
entered values and assigns them to a profile. However, one
profile can only contain a certain number of
authorizations.

Answer / g. sudhakar

Group of upto 150 authorizations can fit into single
profile. To assign the authorizations to the users,
required to name to store one name called a PROFILE.
Without saving the authorizations will not stored into
profile. For this reason first we will save the
authorizations and then generate, automatically it will
generate name termed as a PROFILE. After then we can assign
this profile to the user. Atlast we will use USER
COMPARISION for taking effect into USER MASTER RECORDS.
............. G. SUDHAKAR

Answer / kumar

this is rajesh. ya, after maintaining authorization fields
u need to save and generate the profile b'coz, it is like
tht wht ever fileds ur going to fill is correct and their is
no change so tht ur going to save. after tht ur going to
generate the prolie means it is ready to assign to the
respective user for tht u need confirmation from r/3 tht
this profile is in r/3 db. after tht this profile is
assiging to user.

Answer / deepak

You all are right but Please correct me if am wrong. As you all said that we should first save authorizations using save button. But I dont follow this while making profile. I go directly to generate button to generate profile at that time on taskbar of authrization screen (rotating clock) indicated tht ur authrizations are saved and profile(s) are generated.
And when I came back on screen for making change I do required changes and then generate it again. But I havent got any difficulty...then Why this ?..

Please let me know if there any vacancies for 3 years of Experienced level in SAP Security

0 Answers  

How to insert missing authorization?

0 Answers  

What is sap cryptographic library?

0 Answers  

what is centralize FFID?

0 Answers   TCS, VITS,

What is difference between user master record and user buffer

1 Answers   IBM,

What are su10 t-codes used for?

1 Answers  

how do you add sap_all and sap_new in a role?

6 Answers   Accenture,

how u add a roleowner in a role

2 Answers  

a user is not able to execute a t-code ; hou do u solve that ? wat are the difft reasons that might be existing ?

2 Answers   IBM,

why do you think keylabs is best inistitute in bangalore for sap security, I am looking for sap security training with GRC, do u suggest keylabs or any other inistitute

5 Answers  

What are the different types of sap security tables?

0 Answers  

What is the difference between ECC security and RAR security when GRC (RAR<SPM<CUP) is used, when similar functionality can be performed SAP R3 level(ECC)?

2 Answers   ADP, Baidu,