Question { 9884 }

In which way we can assiagn single role to many users(more
than 5000 usres).

Answer

go to Su10
click on authorization data
click on multiple selectin button beside user input field
a pop up will appear-->click on green import from text file

give the destination of the excel sheet where you have
already kept 5000 users

execute-->execute-->select all -->transfer
this will bring all 5000 users in su10
now change--> role tab--> assign the single role-->save

Regards,
Subal

Question { IBM, 22638 }

How many maximum profiles we can assign to one user?

Answer

apprx 312

Question { Satyam, 29780 }

What do you mean by User Buffer? How it works with the user's
Authorizations?

Answer

tcode is su56

Question { Satyam, 15651 }

How can we maintain Organizational values? How can we create
Organizational values? What is the purpose of these Org.
values?

Answer

Answers:
1.PFCG --> change Auth data-->click on "Orgl levels" button.

2.Run Prog: PFCG_ORGFIELD_CREATE
Please consult OSS note 323817 before creating new
organisational levels.

3.To secure data in Company code ,sales org,distribution
channel,sales area ,plant etc level.

Question { IBM, 16862 }

a user is not able to execute a t-code ; hou do u solve
that ? wat are the difft reasons that might be existing ?

Answer

Reason:

1.tcode does not exist
2.user context missing auth for that tcode
3.user comparison is not current

How to solve:

1.check if the user is having the tcode or not.
by SUIM--> role by complex selection criteria
[s_bce_68001425]
2. if the tcode is not assigned to user -->assign
suiatablle role after taking approval
Make sure to user compare to update the user master record
3.if the tcode is available for the user and user still
cant access--> ask for result of SU53 screen shot, there
might be some other authorization which is missing for thid
user
4.we can also trace the user's auth check by use of st01
fine searching user's missing access bye analyzing st01
report and rc

Question { IBM, 19134 }

I want to lock all the users except sap* and DDIC of a
particular client ?

Answer

su10
f4 on user id fld
change the hit list restriction according to users present
enter
it will bring all avalable users
remove SAP* and DDIC from list
select all and enter
it will bring u back to SU10
with all users except SAP* and DDIC
select all
Lock
N:B- it will lock ur user also

Question { IBM, 10392 }

In an environment of derived roles ; a user is asking for a
t-code ; which is not found in suim in search of roles ?
what will u do ?

Answer

1.check if the tcode exists or not.
2.try to search the role with S_tcode and then putting the
tcode in "roles by complex selection criteria"
3.you should at least get SAP standard role which should
not be assigned.
----------------------------
So after doing all these you are not able to find any end
user role available in system.
Nxt step is the proposal of adding the tcode to a suitable
role.
as it's a derived role envi---> need to add the tcode in
template / parent role
take approval from BPR/role owner for role modification.
they will decide which parent role to change.
change role [by adding the tcode]in Dev and transport to
rest of the sys in landscape