sap security interview questions and answers

8/18/2019 SAP Security Interview Questions and Answers

1/4

Hi friends here I have given sap security Questions and answers.

Following are the SAP Security interview Questions:

1. What is the user type for a background jobs user?

Ans: 1system user !.communication user

2. How to trouble shoot problems for background user?

Ans: using system "race S"#1

3. There are two options in the PFCG while modifing a role. !ne change

authori"ations and another e#pert mode$what is the di%erence between

them?

Ans: $hange authori%ation: "his option we will use when we create new role and modify old role

&'pert mode: i. (elete and recreate authori%ations and profile (All authorizations are recreated.

Values which had previously been maintained, changed or entered manually are lost.

Only the maintained values for organizational levels remain.)

ii. Edit old status (he last saved authorization data for the role is displayed. his is not

useful, if transactions in the role menu have been changed.)

iii. )ead old data and merge with new data (!f any changes happen in "#$% Authorizationswe have to use this)

4. If we give Organiationa! va!ues as " in the #aster ro!e and want to restrict the derived

ro!es for a specific country$ how do we do?

Ans: *e have to maintain org level for the country +ased on the plant and sales area etc in the

derived )ole.

%. What is the tab!e na#e to see i!!ega! passwords?

Ans: ,S)-#

&. What is the tab!e na#e to see the authoriation objects for a user?

Ans: ,S)1!

&. 'hat are two main tables to maintain authori"ation ob(ects?

Ans: ,S/" ,S/0


2/4

). How to secure tables in *+P?

Ans: ,sing Authori%ation group S2"A/,2(IS S2"A/,2$3I4 in ".$ode S&5-

,. 'hat are the critical authori"ation ob(ects in *ecurit?

Ans: "&user&ob',s&user&grp, s&user&agr , s&tabu&dis, s&tabu&cli , s&develop ,s&program

-. /i%erence between 0*!1T and 0*!1 tables?

Ans: 1.,S/"6"ransaction 7S Authori%ation o+8ects

!. ,S/06 "ransaction 7S Authori%ation o+8ects chec9 indicators

11. 'se of (irefighter app!ication

Ans: *henever the reuest coming from the user for new authori%ation .the reuest goes to

firefighter owner. FF owner proved the FF I( to normal user then the user secu admin4 will assign

the authori to those users end user4

1). Where do we add the (( ids to the *A+ user ids?

Ans: ;o to "code


3/4

P2);00 H): aster (ata 6 &'tended $hec9

2. How to cop - roles from a client ) to client ,?

Ans: Add all 1## roles as one single composite )ole and "ransfer the $omposite role automatically

the 1## )ole will transfer to the target client ,sing S$$14

)1. 'ser reports that they !ost the access. We check in *'I and no change docs found. -ow

do you troub!e shoot?

Ans: ay +e user +uffer full or role e'pired

22. 'hat is the correct procedure for ass Generation of 4oles?

Ans: ,sing ".$ode BS,P$

),. What is the 5./ode *67I? What is the #ain usage of this *67I?

Ans: SQ7I 6Quic9 7iew

)4. -ow can we #aintain Organiationa! va!ues? -ow can we create Organiationa!?

Ans: PF$;2);FI&3(2$)&A"& in tcode SA>C

)%. I want to see !ist of ro!es assigned to 18 different users. -ow do you do it?

Ans:

1. ;oto se1D = agr2users then mention the 1# users name

!. ;oto S,I = role +y comple' selection = type user names

25. 'hat do ou mean b 0ser 1u%er? How it works with the user6s

+uthori"ations?

Ans: ,ser +uffer means user conte't it contain user related information i.e.4 authori%ations

parameters reports earlier acceded screens .*e can see the user conte't using ".$ode BS,5D

)0. What is the advantage of /'A fro# a !ay#an9#anager point of view?

Ans: $,A used for maintain and manage the users centrally.

). What is the purpose of these Org. va!ues?

Ans: 7alues: itEs used for restrict the user +y values e.g. Sale order value 161##4 it means user can

create only 1## sales orders not more than that


4/4

)3. What is the #ain purpose of +ara#eters roups ; +ersona!iation tabs in *'81 and

iniapps in +(/?

+ns7 .arameter tab* its used to auto +lls the some of the values during the creation

of orders

!. Personali%ation ta+ is user to restrict the user in selection criteria &.g.: while selecting pay slip it

will shows only last month pay slip +y default. If u select the attendances it will shows current month

+y default

>. iniapps6 we can add some mini applications li9e calculator calendar etc

,8. -ow #any #a1!

sap security interview questions and answers

Documents