Answer: Execute transaction SU01 and fill in all the field. When creating a new user, you must enter an initial password for that user on the Logon data tab. All other data is optional.
Q.What is the difference between USOBX_C and USOBT_C?
Answer: The table USOBX_C defines which authorization checks are to be performed within a transaction and which not (despite authority-check command programmed ). This table also determines which authorization checks are maintained in the Profile Generator. The table USOBT_C defines for each transaction and for each authorization object which default values an authorization created from the authorization object should have in the Profile Generator.
Q.Authorization are required to create and maintain user master records?
A Reference user is, like a System user, a general, non-personally related, user.
Additional authorizations can be assigned within the system using a reference user. A reference user for additional rights can be assigned for every user in the Roles tab.
Q.What is a derived role?
Answer: Derived roles refer to roles that already exist. The derived roles inherit the menu structure and the functions included (transactions, reports, Web links, and so on) from the role referenced. A role can only inherit menus and functions if no transaction codes have been assigned to it before.
functionality (identical menus and identical transactions) but have different characteristics with regard to the organizational level.
Q.What is a composite role?
Answer: A composite role is a container which can collect several different roles. For reasons of clarity, it does not make sense and is therefore not allowed to add composite roles to composite roles. Composite roles are also called roles.
Q,What does user compare do?
Answer: If you are also using the role to generate authorization profiles, then you should note that the generated profile is not entered in the user master record until the user master records have been compared. You can automate this by scheduling report FCG_TIME_DEPENDENCY on a daily.
Organizational level fields should only be created before you start setting up your system. If you create organizational level fields later, you might have to do an impact analysis. The authentication data may have to be postprocessed in roles.
Q.How many profiles can be assigned to any user master record.
Answer: Maximum Profiles that can be assigned to any user is ~ 312. Table USR04 (Profile assignments for users). This table contains both information on the change status of a user and also the list of the profile names that were assigned to the user.
The field PROFS is used for saving the change flag (C = user was created, M = user was changed), and the name of the profiles assigned to the user. The field is defined with a length of 3750 characters. Since the first two characters are intended for the change flag, 3748 characters remain for the list of the profile names per user. Because of the maximum length of 12 characters per profile name, this results in a maximum number of 312 profiles per user.
Q.Can you add a composite role to another composite role?
Answer: No Q. How to reset SAP* password from oracle database.
Where mandt is the client.
Q.What is difference between role and profile.
Answer: A role act as container that collect transaction and generates the associated profile. The profile generator (PFCG) in SAP System automatically generates the corresponding authorization profile. Developer used to perform this step manually before PFCG was introduced bySAP. Any maintenance of the generated profile should be done using PFCG.
How to find out all roles with T-code SU01?
Answer: You can use SUIM > Roles by complex criteria or RSUSR070 to find out this.
Q.How to find out all the users who got SU01 ?
Answer: You can use SUIM >User by complex criteria or (RSUSR002) to find this out.
Q.How to find out all the roles for one composite role or a selection of composite roles?
Q.How to find out all the derived roles for one or more Master (Parent) roles?
Q.How can I check all the Organization value for any role?
Role Type in the role here and hit execute.
You can always download all the information to spreadsheet also using .
Q.How do I restrict access to files through AL11?
Q.How can I add one role to many users?
Answer: SU10. If you have less than 16 users then you can paste the userids.
Q.What are the Best practices for locking expired users?
Answer: Lock the user. Remove all the roles and profiles assigned to the user. Move them to TERM User group.
Q.How can be the password rules enforced ?
Answer: Password rules can be enforced using profile parameter. Follow the link to learn more about the profile parameter.
Q.How to remove duplicate roles with different start and end date from user master?
Answer: You can use PRGN_COMPRESS_TIMES to do this. Please refer to note 365841 for more info.
Also check the profile- Follow the instruction below.
How can I have a display all roles.?
How can I find out all actvt in sap?
Answer: All possible activities (ACTVT) are stored in table TACT (transaction SM30), and also the valid activities for each authorization object can be found in table TACTZ (transaction SE16).
Q.How many fields can be present in one Authorization object?
Q.How to check the table Logs ?
Answer: First, we need to check if the logging is activated for table using tcode SE13. If table logging is enabled then we can see the table logs in t-code SCU3.
Q.What’s the basic difference in between SU22 & SU24 ?
Answer: SU22 displays and updates the values in tables USOBT and USOBX, while SU24 does the same in tables USOBT_C and USOBX_C. The _C stands for Customer. The profile generator gets its data from the _C tables. In the USOBT and USOBX tables the values are the SAP standard values as shown in SU24. With SU25 one can (initially) transfer the USOBT values to the USOBT_C table.
Q.How to remove duplicate roles with different start and end date from user master ?
Answer: You can use PRGN_COMPRESS_TIMES to do this.