Answer / itsgaurav151

Change mode : If a new t-code is added to a role it will pull the auth obj corresponding to that t-code but not any of those which was deleted by us earlier, provided that obj is not related to newly added t-code. Or we can say that change mode will compare the auth in the role for newly added t-code with su24 and and will add all the necessary objects.

Expert mode : it have three options .
1. Delete all auh and create new profile- it will delete all auth data except org level and we have to create new authorizations in role corresponding to all t-codes in role.
2.Edit old status - it will give u chance to edit last saved authorizations only, no matter if u added any t-code to role. it will not pull the auth obj for new t-code from su24.
3. Edit old status and merge with he new - this will compare the auth of all t-codes in role with the records in su24 and will pull the objects corresponding to newly added t-code as well the missing object for any other t-code present in role and was deleted earlier.The newly pulled auth objects are marked as new and old ones are marked old.The auth objects in which auth values are added/changed gets the staus updated.

Answer / keerthishree

When we change/update Su24, then we need to select expert mode [read old data and merge with new data] to reflect su24 changes into the role corresponding to auth obj of effected tcode [tcode which are added in menu tab of PFCG role]. In case we select Change authorization option to edit, then we miss SU24 update in the role and its a big mistake. hence Change authorization option is not recomended one

How can we update the unique E-mail IDs for 1000 users at a time?

3 Answers   Satyam,

---

how do we get list of users who are having mail-id’s in SU01 (Address tab)

4 Answers  

---

How will you mitigate a user against an authorization object which is decided as sensitive by Business

1 Answers   IBM,

---

What is a Role in Sap Security and Types of Roles and use of the role?

2 Answers  

---

what is central user administration?

1 Answers  

---

authorization issue. We had asssigned company codes 'BUKRS' in range for example 4000-4220 some come company code is working some are not working means in between ranges . could you please post the answer as early as possible.

0 Answers   Hexaware,

---

What is use of derived roles?

0 Answers  

---

How to restrict Table access in SAP?

3 Answers   Infosys, Wipro,

---

1.How do I assign roles to a specific group, not to a specific user, and apply the roles to all users in that group? This particular group has four users.?

3 Answers  

---

What are su53 t-codes used for?

0 Answers  

---

How to find list of authorization objects which having org fields?

3 Answers  

---

what do you mean by profile and obeject

3 Answers  

---