Answer / dinesh

the basic defination of Role in layman is just a container
which contains transactions, authorizatoins and instances
of authorization objects, the actual authorization is saved
into profiles, thats why we always need to generate a
profile to complete the role.
when we remove or delimit a role from user buffer through
role tab in su01/10, the profile gets deleted for that user
that means all authorization contained in profile deletes
from user buffer however the actual container remains empty
that is the Role.
hope this clears your doubts and question about roles and
profiles.

Answer / ashwini

Using PRGN_COMPRESS_TIMES prog u can delete the expired role
from user id.

In Agr_1251 we are able to see 100 roles but in SUIM we are able to see 120 roles what's the reason behind this ? why is the difference between the SUIM and the AGR table ?

0 Answers  

---

how we Restrict the auth groups for table maintain, creating Auth group using SE54 to built new Auth groups to restrict tables via auth object S_TABU_DIS

0 Answers   IBM, SAP Labs,

---

What do you mean by User Buffer? How it works with the user's Authorizations?

6 Answers   Satyam,

---

how to delete a single role,the single role is existing with 10 users

4 Answers  

---

how to lock the client?

3 Answers   IBM,

---

---

1 .what are the authorization switches in security

1 Answers   IBM,

---

Q2) Can we ADD an organisational element in a role? If yes how??

2 Answers   HP,

---

Tell me about the license types and what kind of users need to be assigned to these license types

1 Answers   Atos Origin, Wipro,

---

How to access sap security throw internet?

2 Answers  

---

how v Check SOD conflicts through VRAT

2 Answers   IBM,

---

What do you mean by ** Generated password is not downward compatible** ?

2 Answers   Deloitte,

---

how to modify a mass users validity,address,email...at a time ?

3 Answers   IBM,

---