Answer / shanti.s

When we assign roles and save user profile it will not ask
for user conparision...
we need to go to role tab and double click on the role
which you have assigned recently then it will navigate to
PFCG screen then click on user tab if it is yellow we need
to do user comparision... if it is in green we need not to
do user comparision.. if it is yellow then click on user
comparision then complete comparision then that role will
reflect in to user buffer list..
But this role comparision will be done when we create
role..if we miss there then we will do when user will get
authorization error.. reason is role not yet stored in user
buffer list.
We can do mass comparision by using tcode PFUD.

Answer / subal

Hi,
This is Subal from Accenture.
the option is :Utilities-->settings-->
Automatic UM adjustment whn saving role.

If you check this option system will not prompt you for
user comparision rather it will actually do the complete
comparison while saving the role.
you can easily check this by watching the status message
carefully [reconsiliation.....]while saving the role.
This is the reason why it takes longer time while saving
the role as compared to normal saving.

Answer / ravi

If you schedule the below mention sap default job in
background periodic every day or hourly basis no need to
compare manually.
PFG_TIME_DEPENDENCY (This Is a ABAP program)

how to assign the selected transaction in role example in the role we have a Two transactions(T1,T2)so we have a users U1,U2. i need to assign the T1 and lock the T2 to U1, and U2 assign the bothT1,T2

1 Answers   IBM,

---

Hello All, Can any one tell me what are the sap tables will be used while trouble shooting authorization issue BW security activity

1 Answers  

---

How can find out wheather CUA(Central User Administration) is configured on your sap system?

3 Answers   SAIC,

---

1.What is the difference between Su24,su22,and su21? 2.What are the advantages of GRC in segregation of duties when we compare with virsa? 3.There is one derived role, if i copy the role of derived role will the parent or master role will be the same for the new which is derived from the derived role, if so why if not why? 4. what are the organizational level?

3 Answers   IBM,

---

This is in continuataion to the previous question. a user is assigned with tcode SA38.how to restrict him to execute only a few reports,say rsusr003.If you're going to modify the role(having sa38) assigned to the user,that will affect other users also because that role might be assigned to multiple users.I don' want that to happen.so what is the solution?

5 Answers   iGate,

---

how to create new authorization object?

8 Answers   Accenture,

---

User tring to submit the request in GRC but user getting error, what could be the reason , while all BRF+ & MSMP working fine.?

1 Answers   TCS,

---

in which table we can find all authorization groups

5 Answers   Cognizant,

---

what is use of copy data in derived role and when we use this one ???

0 Answers  

---

How many profiles we can add to role and if already user has 312 profiles the, how will you provide more profile to user?

2 Answers   Cap Gemini,

---

how we can see FFID if firefighter not able to see FFids ?

0 Answers   TCS,

---

What does the account assessment category specify in a purchasing requisition in SAP Materials Management?

0 Answers  

---