Answer / sarathy

First & for most important thing is to find out weather the
user is really need that tcode which he wanted us to assign.
Need to take a permission from there concern project manager
and if he approves it then only we need to assign the tcode.

1st option is creating new single role with that particular
tcode and assign it to that user.

2nd option is the above procedure by running SUIM t-code and
check the particular role which can fulfill the needs of
that user. but before assign it to the user we need to take
a permission from that ROLE OWNER. if he approves then we
can assign that role by using SU01 tcode. Hit SU01,Login
with that users and goto Roles TAB and assign that role to
him and SAVE.

Now he can able to run that TCODE.

Answer / naveen

first we have to check if user has access to particular
tcode. If not then run suim with roles by complex selection
criteria -->put object1 as S_tcode as the required tcode
and hit execute button. the query will fetch you a result
of roles. Select a role that has minimum authorization and
satisfy the user requirement. and assign the role to user.

Answer / kondreddi.raghu

1.First we need to check that Tcode in which role it exists.
2.Check for the roles which user already had.
3.Suppose User belongs A2R related.We need to send a mail to concerned Bussiness approver for suggestion.We need mention everything in that mail like who is the user ,What roles he is having at present in which roles the mentioned tcode exists.
4.Suppose if requested tcode exists in finance related role he may suggest to provide that role access (It's one kind of Scenario) . At the same time he may suggest us to add the tcode in any one of the existing user finance related roles(2nd Scenario) . SOme time he may not agree to give that access to that particular user as his designation doesn't match to use that particular Tcode.
5.Once you got approval to add in any one of his existing roles.Then as usual you will make changes to that role in DEV and create a test user Id and send it to that user for testing. Once testing is successful move the transport to QUA(quality). From there transport will move to PROD by STMS team.

Answer / munisankar naidu

ROLE MEANS SET OF PROFILES

PROFILE MEANS SET OF AUTHORIZATION OBJECTS

AUTHORIZATION OBJECTS MEANS SET OF FIELD VALUES

Answer / nisha kharade

using PFCG tcode you can assign role

1) Explain different type of Users? Explain specifically Service User? 2) Difference between System and Communication User?Explain in Context of Profile Parameter? 3) There are 5 systems say BI, SOLMAN, CRM, PI, SRM etc etc. Which system will act as a satellite system in CUA and Why? HOw CUa system works? 4) State different types of Transactions & Tables in Strutural Authorization Profile in HR Security? 5) What is L0 , L1 , L2 , L3 , L4 code called in HR Security? 6) What fields are required to create Strutural Authorization Profile in HR Security? State significance of Evaluation Path? 7) What is Structural Authorization Profile in HR Security? When required Role has already been assigned to User then why Structural Authorization Profile is required by user? 8) How are structural Authorization Profile are created? 9) Important Authorization Object in HR Security? 10) Fields in P_ORGIN A.O? 11) Important infotypes and What is PA? 12) How access is provided for tables to user? Significance of Authorization Group in TDDAT table? 13) Difference between SU22 and SU24? 14) Explain Authorization Structure? 15) Which table stores the Authorization Object of a User? 16) What we do to keep Roles consistent in DEV QAS and PRD? 17) A User has create and display access? Will he have access to change as well? 18) How User can have access to view salary slip of other employees(HR Security)?Explain in detail. 19) In HR security does we add Employee ID anywhere in Roles? 20) Any issue you have faced while Transport? 21) Have you faced any issue in Upgrade? Expalain how to compare Roles from older version of SAP to new version of SAP? 22) Any typical issue you have resolved in HR Security?

0 Answers   ABB, CSC,

What is a derived role?

1 Answers  

i haven taken training on sap basis... right now i m looking for job .what we are doing in trace (st01)explain in detailed.

2 Answers  

how to get ticket from end user?

5 Answers   Accenture,

How to lock all the users at a time?

1 Answers  

How we Creat Mass users via writing LSMW scripts.

0 Answers   IBM,

why we should not check " Generate automatically " option in SUPC?

2 Answers   HP,

Difference between User Group in "Logon data" and "Groups" tab in SU01

8 Answers   HP,

How to add custon t-code to a role and how to find the auth obj of custom t-code.if the custom t-code doesnt have auth obj, will you save and generate the role?

0 Answers  

If I just want to give any user authorization to create role but not to copy from any role so how can I do this ?

2 Answers   Patni,

Which t-code can be used to delete old security audit logs?

0 Answers  

What is the difference between role and a profile?

0 Answers