Answer / angel

1. You can do a query and join few tables - USR02, TSTC, AGR_USERS
2. You can do a small Z ABAP program to select user, class, role, tcode from those tables
3. From GRC

Answer / pradeep

Try to ask the question correctly,in understanding way

Answer / nakulsn

If you go via Tables, it will pull data for roles that are
expired in user master.

Therefore, the best way is to go to SUIM -> Users by complex
selection criteria: put in the list of users in user ID
field, through multiple selection.

In one of the authorization object fields on that screen,
put in s_tcode, hit enter and execute blank.

This will get the list of all executable transactions for users.

You can pull through tables, all the roles assigned to those
users through multiple selection, then put in the list of
roles in AGR_1251 with Object as s_tcode and field name tcd.

Before pulling this data from AGR_1251, you'll need to
filter out the roles for which the validity is already
expired in user master of these user IDs.

Answer / maheshkhumars

Go to SQ01 , there run the query SEC_USER_TXS.. you will
get exactly what you are looking for , tcode assignment for
user , multiple selection

Answer / prasad manne

Go to SE16 >> agr_users. There you can get the role of multiple users by giving the userids. After getting the roles go to table agr_tcodes, give all those role then you can get all the tcodes assigned to the given users.

Answer / guest

In SUIM Go to users by complex selection criteria under
users , there you will have an option to input transaction
Code and pull out the list of users and you can restrict
the output by giving inputs in user field

How we Assigning roles to users positions in HR, troubleshoot access issues

2 Answers   IBM,

Support types of WOs you have faced?

0 Answers   IBM,

1.What is the difference between Su24,su22,and su21? 2.What are the advantages of GRC in segregation of duties when we compare with virsa? 3.There is one derived role, if i copy the role of derived role will the parent or master role will be the same for the new which is derived from the derived role, if so why if not why? 4. what are the organizational level?

3 Answers   IBM,

1) Explain me about your SAP Career? 2) Tell me your daily monitoring jobs and most of them you worked on? 3) which version of SAP are you working on? Is it a java stack or abap stack? 4) Tell me about derived role? 5) what is the main difference between single role and a derived role 6) Does s_tabu_dis org level values in a master role gets reflected in the child role?? 7) Tell me the steps to configure CUA? 8) Is RAR a java stack or Abap Stack? 9) What is the report which states the critical T-codes? and also What is the T-code? 10) What is the T-code to get into RAR from R/3? 11) Explain about SPM?

2 Answers   TCS,

Does anyone know what kind of questions does the Accenture asks on Interview as SAP Security Consultant?

2 Answers   Accenture,

The system raised a message that authorizations are missing but you have SAP-ALL. What would you do?

3 Answers  

we have one parent role and we derived five roles from that and i assigned these derived roles to five users now i want to restrict 2 users for couple of T-codes and rest of the users work with those T-codes , How we can solve the problem

8 Answers   Cognizant,

what is sod in sap security?

0 Answers  

What are pfcg t-codes used for?

1 Answers  

how to do Assigning authorization groups for table restrictions and program restrictions.

1 Answers   IBM,

Q5) What is the procedure you follow in your company as a security admin when a end user complains that he is unable to perform or execute an action in a particular tcode?

2 Answers   HP,

I have a custom tables, for which I created auth group, which contains another 2 tables. Now I have assigned this table to user, but still he cannot access the table. What's the reason? User buffer is fine and not exceeded.

2 Answers   HCL,