Answer / itsgaurav151

Change mode : If a new t-code is added to a role it will pull the auth obj corresponding to that t-code but not any of those which was deleted by us earlier, provided that obj is not related to newly added t-code. Or we can say that change mode will compare the auth in the role for newly added t-code with su24 and and will add all the necessary objects.

Expert mode : it have three options .
1. Delete all auh and create new profile- it will delete all auth data except org level and we have to create new authorizations in role corresponding to all t-codes in role.
2.Edit old status - it will give u chance to edit last saved authorizations only, no matter if u added any t-code to role. it will not pull the auth obj for new t-code from su24.
3. Edit old status and merge with he new - this will compare the auth of all t-codes in role with the records in su24 and will pull the objects corresponding to newly added t-code as well the missing object for any other t-code present in role and was deleted earlier.The newly pulled auth objects are marked as new and old ones are marked old.The auth objects in which auth values are added/changed gets the staus updated.

Answer / keerthishree

When we change/update Su24, then we need to select expert mode [read old data and merge with new data] to reflect su24 changes into the role corresponding to auth obj of effected tcode [tcode which are added in menu tab of PFCG role]. In case we select Change authorization option to edit, then we miss SU24 update in the role and its a big mistake. hence Change authorization option is not recomended one

What are identical users in CUA?

2 Answers  

---

what are the important A.O ? why they are important ... ?

1 Answers   IBM,

---

What is the difference between Execution and Simulation in grc rar

1 Answers   IBM,

---

What is the latest change that was done to the SU53 trace, which is used to find the last authorization failure in SAP..???

4 Answers   IBM, Tech Mahindra,

---

what is the difference between se16 and se16n ?

4 Answers   IBM,

---

What authorization is required to create and maintain user master records?

0 Answers  

---

What are the issues will face while creating user in the system ?

8 Answers   Accenture,

---

If we have UK roles in our system and we want to find the AUS australian role how you will find the same

2 Answers   Cap Gemini,

---

How to restrict except "Role" remaining all (user,etc everything) under SUIM T-Code ?

1 Answers   IBM,

---

which ticketing tool is used in your company?Explain ticketig process?

2 Answers   IBM, TCS,

---

Is SU25 step(2nd) is mandatory when SAP up-gradation happened?

2 Answers   Accenture, RB,

---

how many composite roles can be assigned to a user ?

4 Answers   ADP, Baidu,

---