Answer / subal

1.check if the tcode exists or not.
2.try to search the role with S_tcode and then putting the
tcode in "roles by complex selection criteria"
3.you should at least get SAP standard role which should
not be assigned.
----------------------------
So after doing all these you are not able to find any end
user role available in system.
Nxt step is the proposal of adding the tcode to a suitable
role.
as it's a derived role envi---> need to add the tcode in
template / parent role
take approval from BPR/role owner for role modification.
they will decide which parent role to change.
change role [by adding the tcode]in Dev and transport to
rest of the sys in landscape

Answer / gaurav

1> You'll need to check if the transaction that is being
requested is available in the system i.e if it exists or
not. You'll have to check this thru transaction SE93.
[If not then the ABAP team needs to get this transaction
coded into the system]

2> If transaction does exists and if you are not able to
find this in any production/ end user roles, then you'll
have to see if you can find any ViewName/ Table Name linked
to this transaction [this would be on the same screen i.e.
SE93 at the bottom]

3> If a ViewName is available then this means that this new
transaction will be interacting with the table you found
and hence the object S_TABU_DIS and SU24 change will come
into picture.

4> You then need to take a trace yourself in Development
system by executing this transaction and check the trace
report for the activities that show up.
[Note: Remember to undo whatever you have saved]

5> Take appropriate approval for role modification as per
process you follow in your organization.

6> Make SU24/ role changes in development system and have
these changes moved till Quality or Fix system for testing
purpose. Create test ID's accordingly.

7> If testing fails, get SU53 report and redo analysis. If
testing is successful create production/ end user roles,
make a TP request and get your changes moved till
production system.

Answer / sasigopal

Hi,
wonderfull explnation thx.

Answer / sandy

first of all check with role owner whether the user has
permission for that t_code. If no role is found with that
t_code create a new role with that t_code and assigned to
that user after permission from role owner.

What is the difference between Execution and Simulation in grc rar

1 Answers   IBM,

---

DOES ANYONE KNOW WHAT TYPES OF SECURITY QUESTIONS ACCENTURE ASKED IN USA....URGENT PLEASE

0 Answers   Accenture, HCL, IBM,

---

Difference between SE01, SE10 & SE09?

3 Answers   IBM,

---

how do we create firefigter Id in VIRSAs VRAT

3 Answers  

---

What is sso in sap security?

1 Answers  

---

if user enters a tcode how the system knows what action should be done ?

3 Answers   Deloitte, Pranav Systtech,

---

I have deleted single role from composite role now i want to find out the changes in composite role without using SUIM. Is there any other possibilitie to get?

3 Answers  

---

What are the components in VIRSA tool and GRC?

12 Answers   SAP Labs,

---

What are the critical tables in BI Security

1 Answers   IBM, L&T,

---

i need to give authorisation to a user to su01 tcode but the delete options should not work..i,e the user should be able to Create,disp,change etc but not delete on su01. how cam i do this?

5 Answers   Accenture,

---

how do we get list of users who are having mail-id’s in SU01 (Address tab)

4 Answers  

---

explain the personalization tab within a role?

0 Answers  

---