Question { IBM, 11162 }

what is role matrix

Answer

role matrix nothing but a

column we can maintain t-codes
z_singlerole z_dervir
---------------------------------------
pfcg x
su01 x
va01 x
vk11 x

see based on business process approvers we can assign t-
codes to a particular roles

Question { IBM, 8585 }

What do you mean by Role Remediation?

Answer

role remediation is one of the risk resolution strategy
which is used for modifying the content at rolelevel it
means that we are removing the sod confilicts

Question { Accenture, 5740 }

What is Business Process? Explain about the Business Process
Procure to Pay?

Answer

business process which can categorise the risks based on
modules

Question { 8974 }

Q)if u r using 10 firefighter ids at a time? How will the
log reports goes to controller?
Q)wt is ruleset? and how to update risk id in rule set?

Q)wt is the procedure for Role modifications?explain with
example?

Q)who will done user comparision?

Answer

1) log reports send through ( mail , workflow or
logdispaly ) these are available at options tab when we are
assigning fids to the controller tab.

2) ruleset which contains ( busniessprocess , risks ,
function and action,authorisations ) is know as rule set.

Question { TCS, 13357 }

1)What does the Profile Generator do?
2)What is the main purpose of Parameters, Groups &
Personalization tabs
3)in SU01? purpose of Miniapps in PFCG?
4)What happens to change documents when they are transported
to the
production system?
5)what are the issues you faced with UME?
6)what is the Ticketing tool that you are using in your
organisation?and
explain?
7)what do you know abt LSMW?
8)Difference b/w su22 and su24 ?
9)what is the landscape of GRC?
10)What is the difference between Template role & Derive
role?

Answer

1. we can create roles , transport , copy ,
download,modifications , all these thing done from pfcg t-
code.

2.parameters : when ever user want some defaults values
when ever he/she excute the t-code we can mainatian some
pid's by taking help of abapers.

group : based on user roles and responsibiltes security
admin can asssign to particular group.

personalization : this data provides by sap itself based on
t-codes which are maintained at menu tab.

3. using mini apps we can add some third party
functionality

6.remedy tools and some comapny internal tools used for
geeting issues from client side .

7.lsmw is used for creating large number of user at a time .

8.su22 is maintaind standard t-codes and thier standard
autorisation object ( usobx and usobt ).

su24 : here we can mainatin customer related t-code and
their authorisation objects ( usobx_c and usobt_c ).

9.grc land scape develop and production .

9. tempaltes rrole : it is provided by sap it self.
dervide role : a role which is derived from a master role
it can inherit the menu structure t-codes and all but it
cant inherit the organisation level , here we can maintain
orgnisation levels only .

Question { TCS, 13357 }

1)What does the Profile Generator do?
2)What is the main purpose of Parameters, Groups &
Personalization tabs
3)in SU01? purpose of Miniapps in PFCG?
4)What happens to change documents when they are transported
to the
production system?
5)what are the issues you faced with UME?
6)what is the Ticketing tool that you are using in your
organisation?and
explain?
7)what do you know abt LSMW?
8)Difference b/w su22 and su24 ?
9)what is the landscape of GRC?
10)What is the difference between Template role & Derive
role?

Answer

4) Change documents cannot be displayed in
transaction 'SUIM' after they are transported to the
production system because we do not have the 'befor input'
method for the transport. This means that if changes are
made, the 'USR10' table is filled with the current values
and writes the old values to the 'USH10' table beforehand.
The difference between both tables is then calculated and
the value for the change documents is determined as a
result. However, this does not work when change documents
are transported to the production system. The 'USR10' table
is automatically filled with the current values for the
transport and there is no option for filling the 'USH10'
table in advance (for the history) because we do not have
a 'befor input' method to fill the 'USH10' table in advance
for the transport.

Question { 10158 }

how to delete a single role,the single role is existing with 10 users

Answer

go to su10 -- select 10 user --- go to roles tab -- remove single role

2) then go to pfcg -- select single role --- click on truck symbol--- create customizing request.

3) then come back to the pfcg --- give role name and delete .

4) now go to se10 --- release the request .

5) then import to the target system.