Difference between Change Mode and Expert Mode in PFCG?

Answer Posted / itsgaurav151

Change mode : If a new t-code is added to a role it will pull the auth obj corresponding to that t-code but not any of those which was deleted by us earlier, provided that obj is not related to newly added t-code. Or we can say that change mode will compare the auth in the role for newly added t-code with su24 and and will add all the necessary objects.

Expert mode : it have three options .
1. Delete all auh and create new profile- it will delete all auth data except org level and we have to create new authorizations in role corresponding to all t-codes in role.
2.Edit old status - it will give u chance to edit last saved authorizations only, no matter if u added any t-code to role. it will not pull the auth obj for new t-code from su24.
3. Edit old status and merge with he new - this will compare the auth of all t-codes in role with the records in su24 and will pull the objects corresponding to newly added t-code as well the missing object for any other t-code present in role and was deleted earlier.The newly pulled auth objects are marked as new and old ones are marked old.The auth objects in which auth values are added/changed gets the staus updated.

Is This Answer Correct ?    52 Yes 4 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

What does the profile generator do?

689


How we Provided SAP Security design, configuration, and support for SAP Net Weaver systems running BI/BW 7.0 (Net Weaver 2004s)

1783


Is there a table for authorizations where I can quickly see the values entered in a group of fields?

747


What are st01 t-codes used for?

721


You wan to transport user groups from transaction sugr? Would this impact the groups tab in su01? What would you do?

729






By which parameter number of entries are controlled in the user buffer?

905


1) Explain different type of Users? Explain specifically Service User? 2) Difference between System and Communication User?Explain in Context of Profile Parameter? 3) There are 5 systems say BI, SOLMAN, CRM, PI, SRM etc etc. Which system will act as a satellite system in CUA and Why? HOw CUa system works? 4) State different types of Transactions & Tables in Strutural Authorization Profile in HR Security? 5) What is L0 , L1 , L2 , L3 , L4 code called in HR Security? 6) What fields are required to create Strutural Authorization Profile in HR Security? State significance of Evaluation Path? 7) What is Structural Authorization Profile in HR Security? When required Role has already been assigned to User then why Structural Authorization Profile is required by user? 8) How are structural Authorization Profile are created? 9) Important Authorization Object in HR Security? 10) Fields in P_ORGIN A.O? 11) Important infotypes and What is PA? 12) How access is provided for tables to user? Significance of Authorization Group in TDDAT table? 13) Difference between SU22 and SU24? 14) Explain Authorization Structure? 15) Which table stores the Authorization Object of a User? 16) What we do to keep Roles consistent in DEV QAS and PRD? 17) A User has create and display access? Will he have access to change as well? 18) How User can have access to view salary slip of other employees(HR Security)?Explain in detail. 19) In HR security does we add Employee ID anywhere in Roles? 20) Any issue you have faced while Transport? 21) Have you faced any issue in Upgrade? Expalain how to compare Roles from older version of SAP to new version of SAP? 22) Any typical issue you have resolved in HR Security?

4610


Authorization check on s_btch_job failed. What would happen now?

774


Explain secure store and forward?

618


What are su25 t-codes used for?

695


What are the uses of an authorization group?

709


how to do Reporting and Analysis authorizations

1893


What is the use of su56?

686


Can you explain internet-level security?

644


What authorization is required to create and maintain user master records?

668