Answer / bishnu lal sahu

When we save a profile that we only save the values
whatever changes made in authorization object but still it
is not working due to non activation of authoriztion
profile.

A generate button used to activate all values and create a
authorization profiles.

Because we can't assign authorization directly to the user
that's why we generate a authorization profile.

Answer / ukh

=> difference between Saving and Profile Generating?

Saving a profile is very similar to saving a regular program
and generating a profile is very similar to compiling a
regular program, hoping that you wrote a program sometime in
your life.

Say you are working on a profile and you have not finished
it completely and now you have to go away for 1/2 day (for
any reason), what will you do? Before you log off, if you do
not save your work, you will lose all the work you did so
far working on the profile. So, basically you will save it.
This does not mean it is ready to use. That also means it is
not active.

Now you come back to work, go into the earlier profile, and
now finish it completely and now you are ready to assign it
to the users. Here, you will have to "generate" the profile
and now the profile is ready for user assignment.

Answer / jagadish

hai this is jagadish

if you not generate profile name before u chage the
authorization then it ask a profile name when u save and
generate in authorization tab. and when we generating the
profile after save then the profile is save with the given
authorizations and activities and et... in database. One
thing u understand that any authorization or activities are
stored in a profiles and when we assign them then the
profile name takes place in user master records. ok


if i am wrong in this correct me any of this group

byeee

jagadish

Answer / qrueshi

While saving profile means just we are saving in to dummy
space it has no effect

Due to generating profile we are activating the
authorization which is maintained

Only difference is if you just saved then it is not
activated status i.e Deactivated status

when you genarate it it will change the status into working
status or activated status

Answer / shanti.s

If we do any modifications or If we create any role and
maintain authorization fields and values we will save those
changes. That means wht changes we have made that will be
saved. If we generate profile means it wil generate
profiles according to tcode and authorizaion objects you
have maintained in that role.That profiles wil remain in
user master records...

Thanks
Shanti.

Answer / kishore kumar vuthpala

After maintaining the authorizations in accordance with the
policies of your company, you can generate the
authorization profile. It is only then that the
authorizations contained take effect.
During the generation, the Profile Generator collects all
entered values and assigns them to a profile. However, one
profile can only contain a certain number of
authorizations.

Answer / g. sudhakar

Group of upto 150 authorizations can fit into single
profile. To assign the authorizations to the users,
required to name to store one name called a PROFILE.
Without saving the authorizations will not stored into
profile. For this reason first we will save the
authorizations and then generate, automatically it will
generate name termed as a PROFILE. After then we can assign
this profile to the user. Atlast we will use USER
COMPARISION for taking effect into USER MASTER RECORDS.
............. G. SUDHAKAR

Answer / kumar

this is rajesh. ya, after maintaining authorization fields
u need to save and generate the profile b'coz, it is like
tht wht ever fileds ur going to fill is correct and their is
no change so tht ur going to save. after tht ur going to
generate the prolie means it is ready to assign to the
respective user for tht u need confirmation from r/3 tht
this profile is in r/3 db. after tht this profile is
assiging to user.

Answer / deepak

You all are right but Please correct me if am wrong. As you all said that we should first save authorizations using save button. But I dont follow this while making profile. I go directly to generate button to generate profile at that time on taskbar of authrization screen (rotating clock) indicated tht ur authrizations are saved and profile(s) are generated.
And when I came back on screen for making change I do required changes and then generate it again. But I havent got any difficulty...then Why this ?..

How can find out wheather CUA(Central User Administration) is configured on your sap system?

3 Answers   SAIC,

What is the use of RSECADMIN ?

1 Answers  

How will you mitigate a user against an authorization object which is decided as sensitive by Business

1 Answers   IBM,

How many Tcodes can be assigned to a role ?

1 Answers  

How we Provided Security design, configuration, and support for SAP Enterprise Portals

0 Answers   IBM,

You want to configure the local and global setting of cua. Where would you do that? What would happen if you have inconsistent settings?

0 Answers  

How we Educated client personnel in R/3 Security and general Basis knowledge

0 Answers   IBM,

11.If the user don't have the access of su53?then how to fine the user missing authorization with out using st01?

6 Answers  

Explain protecting public keys?

0 Answers  

your functional team has asked you to provide the seurity for a tcode.how do you go about it?

2 Answers   iGate,

How see hierarchies in BI security

1 Answers   IBM, L&T,

how to adjust user master records?

6 Answers   Accenture,