Answer Posted / subal

Hi ,
This is Subal working @ accenture.

SU25- It is used as one of the post installation activities.
There are already two tables usobt [contains related
authorization objects associated with a particular tcode]
and usobx [check table ie what all authorization objects
will be checked ["yes" ]in response to access for that
particular tcode].

So when we perform SU25--> initially fill the customer
tables:
usobt gets copied to usobt_c
usobx gets coppied to usobx_c
Su25 should be performed for one time.

c stand for customer specific.
----------------------
SU24 is used to display/change what all auth objects are
kept as check yes/no [Or do not check at all]
we can maintain/change the option as well.

For Eg: tcode su01 is related to 53 auth object but only 10
are kept for check "yes" --> these 10 object can be
maintained from PFCG later on.

How we Provided Security design, configuration, and support for SAP Enterprise Portals

1765

---

what is the use of defaults tab in start menu

1383

---

Which tables will you use for making customizing setting for security administration?

699

---

how we can see FFID if firefighter not able to see FFids ?

1470

---

Can you explain secure store and forward?

615

---

---

What is the use of Personalization tab in SU01?

4991

---

Differentiate between temp role and copy role

691

---

Can you explain document transfer-level security?

665

---

Give an example of SOD with object level control & also decide the Risk implication from the Technical standpoint.

4117

---

List the various user types.

617

---

what is the process to find that one consultant had removed a table from sap tables

2034

---

What is a composite role?

801

---

How we schedule and administering background jobs?

655

---

Which transaction should not be given to BASIS and DEV team in Production?

1900

---

What authorization are required to create and maintain user master records?

661

---