Answer / uma

SU25: A transaction that copies SAP defaults from USBOT &
USOBX to USOBT_C and USOBX_C.

USOBT, is a table that consists of transactions and
authorisation objects. It stores default values of
authorisation from authorisation objects.

USOBX, is a table that defines the necessary authorisation
checks that needs to be performed within a transaction.

Initially both tables USOBT and USOBX consists of default
values. These two tables are then used for fill up of the
customer tables USBOT_C and USOBT_X through the transaction
SU25.


SU24: A transaction that maintains the assignment of
authorisation objects in the customer tables USOBT_C and
USOBX_C.

Answer / parthu

SU25 will be used in 2 phases. 1 is at implementation and 2 is at Upgrade Phase.

At Implementation Phase we need to do some customizations according to Customers Business Requirements.

TCode: SU22 Will Contain Predefined configuration Tables (Default tables provided by SAP) USOBX & USOBT and We can not modify them at SU22 level. So, in order to achieve this we use SU25 to copy the tables USOBX & USOBT.

In SU25 Screen, Select 1st option (Initially Fill The Customer Tables). So it will copy from "USOBX to USOBX_C" and from "USOBT to USOBT_C"

"C" stands for Customization and SU25 is one time job (at implementation phase only)

2nd PHASE(UPGRADE): At Up-gradation Phase, In SU25 Tcode We select 2A,2B,2C,2D options.

Coming to TCode SU24, Once we copy USOBT and USOBX from SU22 (with the help of SU25). SU24 will contain USOBT_C and USOBX_C tables (Customization Tables) where we are going to customize the Authorization Objects , Fields & Field Values as per the requirements of CUSTOMER.

USOBX_C will contain Check indicators and USOBT_C will contain T.codes, Filed & Values.

Answer / purushoth ak

Every Tcode has list of authorization objects which are
maintained in roles. when a Tcode is executed that objects
will refered in roles, if an object is not maintained in
role then it is an authorisation error which can be seen
through SU53 tcode. This list of maintianed auth. object
of Tcode can be checked through SU24.

Answer / subal

Hi ,
This is Subal working @ accenture.

SU25- It is used as one of the post installation activities.
There are already two tables usobt [contains related
authorization objects associated with a particular tcode]
and usobx [check table ie what all authorization objects
will be checked ["yes" ]in response to access for that
particular tcode].

So when we perform SU25--> initially fill the customer
tables:
usobt gets copied to usobt_c
usobx gets coppied to usobx_c
Su25 should be performed for one time.

c stand for customer specific.
----------------------
SU24 is used to display/change what all auth objects are
kept as check yes/no [Or do not check at all]
we can maintain/change the option as well.

For Eg: tcode su01 is related to 53 auth object but only 10
are kept for check "yes" --> these 10 object can be
maintained from PFCG later on.

Answer / utsav mukherjee

SU25 copies SAP default values from the tables :USOBT &
USOBX to customer tables: USOBT_C and USOBX_C.

Please Note: [USOBT: It consists of transactions and
authorisation objects with SAP default Authorization
values.
USOBX: It defines the necessary authorisation
checks within a transaction.]


SU24 maintains the assignment of authorisation objects in
the customer tables USOBT_C and USOBX_C.

Please Note: [USOBT & USOBX are not coming into picture in
case of SU24]

Answer / vamshi

In su25 ; we can create customise copies of usobx and
usobt tables i.e. usobx_c and usobt_c .

in su24 ; u can work with this customised tables.

in su22 ; u can work with the original tables i.e. usobx
and usobt.

Answer / velu

every t code has list of authrization su24 maintanin check
indicators and maintain templets
su25 checked roles maintain dispalys transacation codes
and customer tables file upgrade This list of maintianed
auth. object of Tcode

Answer / syed mahboob feroz ahmed

Hi,
SU24 deals with many factors for Object Class,when a role
is created and a object class is being transferred it will
proceed with Authorization as follows:
Changed,Maintained,Unmaintained,Manually.
1)Changed is when Auth is changed.
2)Maintained is when orgfields and Auth is Maintained.
3)UnMaintained is when when there is no Auth.
4)Manually is when we manually change Auth or Org Fields to
0.

what are the profiles that are related to transports ? what are the A.O related to transports ?

3 Answers   IBM,

different b/w Direct assigment and indirect role in bi security whn will go direct assignment

2 Answers   CTS,

1.How do I assign roles to a specific group, not to a specific user, and apply the roles to all users in that group? This particular group has four users.?

3 Answers  

Plz can anybody share ur work experience on Mitigating conflicts using SoDs with GRC tools or without GRC (thankful if examples r provided)

1 Answers   CTS,

(1)Difference between usobt_c and usobx_c?(2)What are usobt and usobx tables for?(3)Difference between usobt and usobt_c?(4)Se93.How u create custom t-codes?(5)Difference b/w customizing request and workbench request?(6)To trnsprt sU24 setting which is used is it customizing or workbench request?(7)If we add org level elements in a master role will it reflect in child role and how AGR_1252 will act as a barrier?(8)How to do mass user to role assignment using secatt, will u use su01 or su10?Explain why you will use SU10 not SU01?(9)Can SU10 can be used for mass password reset?Why not?(10)If you want to reset the password for say 100 users in Production how will you do?(11)Expalian Steps 2A and 2B in SU25?

6 Answers   HCL,

1.why we use derived role in sap security?2.what is the technical difference between master and derived role?

1 Answers   KPMG,

What are se10 t-codes used for?

0 Answers  

You want to force a user to change their password. How would you do it?

2 Answers  

what sap table can be helpful in determining the single role that is assigned to a given composite role?

1 Answers  

Q3) What is difference between R/3 security and HR security? Explain in detail or its importance?

2 Answers   HP,

User tring to submit the request in GRC but user getting error, what could be the reason , while all BRF+ & MSMP working fine.?

1 Answers   TCS,

what is the critical issue u are faced in your previous experience

0 Answers   Accenture, CTS,