Answer / dinesh

the basic defination of Role in layman is just a container
which contains transactions, authorizatoins and instances
of authorization objects, the actual authorization is saved
into profiles, thats why we always need to generate a
profile to complete the role.
when we remove or delimit a role from user buffer through
role tab in su01/10, the profile gets deleted for that user
that means all authorization contained in profile deletes
from user buffer however the actual container remains empty
that is the Role.
hope this clears your doubts and question about roles and
profiles.

Answer / ashwini

Using PRGN_COMPRESS_TIMES prog u can delete the expired role
from user id.

How we Assigning roles to users positions in HR, troubleshoot access issues

2 Answers   IBM,

---

what are ticketing tools?

2 Answers   IBM, TCS,

---

What are the mandatory authorization object should have like Reporting user ,power user ,super user and administrator user

2 Answers   IBM,

---

in how many roles a T-code exists? Find it without se16 or suim

10 Answers   IBM,

---

What are the issues will face while creating user in the system ?

8 Answers   Accenture,

---

What are su53 t-codes used for?

0 Answers  

---

How to add a new tcode to 1000 roles at a time?

2 Answers   Cap Gemini, Tech Mahindra,

---

Explain transport system-level security?

0 Answers  

---

I want a list of users along with roles for a client ? hou to do it?

3 Answers   IBM,

---

what is the profile

3 Answers  

---

What is the latest change that was done to the SU53 trace, which is used to find the last authorization failure in SAP..???

4 Answers   IBM, Tech Mahindra,

---

How to run the daily background job s for virsa violations ? thabks in advance

0 Answers   IBM,

---