Answer / sap

If we disable the check in SU24 check will not perform for
corresponding authorization objects. Also It will not pull
any data from SU24 after adding this role into any of the
roles. Correct me if i am wrong.

Answer / prasad manne

Check - Yes >> authorization check will be performed and object is pulled when transaction is added to some role.
Check - No >> authorization check will be performed and object is not pulled when transaction is added to some role.
Do not chek >> authorization check will not be performed

Answer / krishna

This question can be split into multiple scenarios:
1. If the object us added in SU24 and check is de-activated, then the object will not be pulled into the role, however since there is code, it will sure check the Authorization for the new object. Any thing in SAP is through code, hence if the code is checking then the user should have this auth. object in his buffer otherwise system will not allow.
2. Add this object manually in the role and maintain, then this will overcome the SU24 changes, but this is not the right approach, still we can overcome.

Answer / bharathi

su24 call the authorization object in that have three
check indicators
1. check "yes"
2. check "NO"
3. "do not Check"

do not check: dont check atol also that means user can't
execute any object fuctions.

if worg, please correct me.

How can sap security be improved?

0 Answers  

---

1.why we use derived role in sap security?2.what is the technical difference between master and derived role?

1 Answers   KPMG,

---

what is the difference between se16 and se16n ?

4 Answers   IBM,

---

can any tell me if a t_code is assigned to 5000 users then how would you find out who never uses this t_code?

3 Answers   CTS,

---

What transactions can be assigned for all the users ?

6 Answers   Accenture,

---

Users are lockdown from past 3 -4 months. Which table is used to know that which users are lockdown?

3 Answers   IBM,

---

what are the issues you faced with UME?

0 Answers   iGate,

---

for eaxmple we are creating Z-Tcode How to restrict and what level are restict.

1 Answers   Hexaware,

---

How many authorizations fit into a profile?

1 Answers  

---

Q2) Can we ADD an organisational element in a role? If yes how??

2 Answers   HP,

---

What are se09 t-codes used for?

0 Answers  

---

in my production system there are some 20 roles created in the production system itself without following the standard procedure of creating in dev testing it qas and then moving it to prd.so how do you find out all the roles created in prd system?

5 Answers   iGate,

---