Question { IBM, 9201 }

Can we delete a Role and transport it?Explain How?

Answer

To delete a role across landscapes, in dev system we first
add the role to a transport request and then delete the role
in pfcg(first screen).
Transport should be released and moved to QA/ PROD to ensure
removal of the role from these systems.

Question { IBM, 9201 }

Can we delete a Role and transport it?Explain How?

Answer

To delete a role across landscapes, in dev system we first
add the role to a transport request and then delete the role
in pfcg(first screen).
Transport should be released and moved to QA/ PROD to ensure
removal of the role from these systems.

Question { IBM, 12223 }

In SU53 screenshot , there are missing authorization. How
you come to know that these are the relevant Roles in which
we have to add these objects? Decision not SUIM

Answer

We need to study the documentation of said object and its
object class and include it in a role that contains related
functions. This should be done consulting the key users
related to that module.

Having said this, it should be properly check beforehand
that indeed the missing authorization is the real reason for
an authorization failure