Answer / subal

1.check if the tcode exists or not.
2.try to search the role with S_tcode and then putting the
tcode in "roles by complex selection criteria"
3.you should at least get SAP standard role which should
not be assigned.
----------------------------
So after doing all these you are not able to find any end
user role available in system.
Nxt step is the proposal of adding the tcode to a suitable
role.
as it's a derived role envi---> need to add the tcode in
template / parent role
take approval from BPR/role owner for role modification.
they will decide which parent role to change.
change role [by adding the tcode]in Dev and transport to
rest of the sys in landscape

Answer / gaurav

1> You'll need to check if the transaction that is being
requested is available in the system i.e if it exists or
not. You'll have to check this thru transaction SE93.
[If not then the ABAP team needs to get this transaction
coded into the system]

2> If transaction does exists and if you are not able to
find this in any production/ end user roles, then you'll
have to see if you can find any ViewName/ Table Name linked
to this transaction [this would be on the same screen i.e.
SE93 at the bottom]

3> If a ViewName is available then this means that this new
transaction will be interacting with the table you found
and hence the object S_TABU_DIS and SU24 change will come
into picture.

4> You then need to take a trace yourself in Development
system by executing this transaction and check the trace
report for the activities that show up.
[Note: Remember to undo whatever you have saved]

5> Take appropriate approval for role modification as per
process you follow in your organization.

6> Make SU24/ role changes in development system and have
these changes moved till Quality or Fix system for testing
purpose. Create test ID's accordingly.

7> If testing fails, get SU53 report and redo analysis. If
testing is successful create production/ end user roles,
make a TP request and get your changes moved till
production system.

Answer / sasigopal

Hi,
wonderfull explnation thx.

Answer / sandy

first of all check with role owner whether the user has
permission for that t_code. If no role is found with that
t_code create a new role with that t_code and assigned to
that user after permission from role owner.

How to restrict except "Role" remaining all (user,etc everything) under SUIM T-Code ?

1 Answers   IBM,

---

In an environment of derived roles ; a user is asking for a t-code ; which is not found in suim in search of roles ? what will u do ?

4 Answers   IBM,

---

I want to reset the passwords of 100 users.how do you do it?

7 Answers   HP, iGate,

---

Scheduled a job for user master reconciliation , a user is in a validity date and roles assigned to that user are in validity date, but for reasons roles has been removed from the user master record, what could be the reason, this is not related to position based security, could some explain?

2 Answers  

---

what is analysis authorization in sap bi and how to create analysis authorization in sap bi?

0 Answers   TCS,

---

---

By which parameter number of entries are controlled in the user buffer?

0 Answers  

---

What is sap’s grc?

0 Answers  

---

How to assign sap_all to end user if i have approval?remember i do not have GRC.

2 Answers   Satyam,

---

What is the parameter in security audit log (sm19) that decides the number of filters?

1 Answers  

---

Tell me about your SAP Career? (all interviews start with this queshion only...pls tell me a template for this answer)

1 Answers  

---

how do we create firefigter Id in VIRSAs VRAT

3 Answers  

---

How to assign any program to user?

0 Answers   Cap Gemini,

---