Answer / dinesh

the basic defination of Role in layman is just a container
which contains transactions, authorizatoins and instances
of authorization objects, the actual authorization is saved
into profiles, thats why we always need to generate a
profile to complete the role.
when we remove or delimit a role from user buffer through
role tab in su01/10, the profile gets deleted for that user
that means all authorization contained in profile deletes
from user buffer however the actual container remains empty
that is the Role.
hope this clears your doubts and question about roles and
profiles.

Answer / ashwini

Using PRGN_COMPRESS_TIMES prog u can delete the expired role
from user id.

Explain how you can lock all the users at a time in SAP?

2 Answers   IBM,

---

You want to force a user to change their password. How would you do it?

2 Answers  

---

While run the risk analysis fir two user & its showing blank screen and other users its working fine , whats the reason?

5 Answers   TCS,

---

What are se09 t-codes used for?

0 Answers  

---

What are su10 t-codes used for?

1 Answers  

---

---

How to codify for an Item in SAP? How many digits are required for an item?

0 Answers  

---

HI FRIENDS... I WANT TO KNOW FEW TICKETS ON SECURITY WITH SOLUTION.

0 Answers  

---

Q)if u r using 10 firefighter ids at a time? How will the log reports goes to controller? Q)wt is ruleset? and how to update risk id in rule set? Q)wt is the procedure for Role modifications?explain with example? Q)who will done user comparision?

2 Answers  

---

Is it possible to change role template? How?

0 Answers  

---

what is the profile

3 Answers  

---

Explain snc in sap security?

0 Answers  

---

one tcode,say sa38, is assigned to 10 diffrent users through a same role.I want to restrict one of those 10 users to execute only a few reports in sa38 but not all reports.what are the possible ways of getting it done?

3 Answers   Cap Gemini,

---