Question { iGate, 13201 }

what is the procedure for deleting a role?

Answer

As a regular security practice no user will be granted access to delete role permanently from production in-order to do that. The role has to be part of a transport before w e go ahead and delete it from DEV system and eventually transport it to Prod.

Steps: go to Dev system -> PFCG
you can use Mass transport or transport to move the role to prod. and delete the role

Question { 7235 }

how to transport roles

Answer

Roles have to be transported from Dev to Prod using Revtrac.

this can be done from PFCG using either Mass role transport or single transport. Once the roles are put in the transport check for the generate profile for composite role or just the single role.

Question { IBM, 9024 }

If SU53 screenshot does not give anything then How will you
find the solution? If there is no relevant Role , then How?

Answer

As SU53 screenshot gives the details of the last failed authorization check its always a good practice to trace the user(ST01) to get the list of missing authorizations.

Question { Cognizant, 11911 }

Security admin kept trace on a user.But while analyzing it is showing that "zero records" found.Then what to do?

Answer

The list of steps:

1. Check the server user is on using AL08 tcode or a user screen share

2. Switch the server using the tcode SM51

3. Kindly check the box for Kernel Authorization check

please check for the time range given for the trace.

Question { IBM, 16719 }

How to trace a Report User (Business User) in SAP BI?

Answer

You could trace the user in two ways in SAP BI

1. regualr ST01 trace for missing auth values

2. RSECADMIN trace for the regular Analysis auth values