R/3 Security

1) What are the mandatory fields in SU01 – User creation?

2) How many USER TYPES are there in SAP? Give example for each type of user.
3) Where do we use Reference user?
4) What is the max no of profiles that can be assigned to user?
5) Max no of Auth Objects that can be added to a role?
6) Max no of Fields in one Auth Object?
7) What is the difference between USER GROUP in LOGON DATA tab and GROUPS tab in SU01 T
code?
8) What is the table related to Reference users? USREFUS
9) Difference between SAP_ALL and SAP_NEW?

SAP_ALL:- SAP_ALL is a standard composite profile provided by SAP used on

need basis, to resolve particular issues. It contains all SAP system objects and
Transactions meaning that a user with this profile can perform all tasks in the
SAP System.. SAP_ALL is very critical and only SAP* contains SAP_ALL attached
to it in the production system. No other dialog users have SAP_ALL attached to
them.
SAP_NEW:- SAP_NEW is a SAP standard Composite Profile which is usually
assigned temporarily during an upgrade to ensure that the activities and
operations of SAP users is not hindered, during the Upgrade. It contains all the
necessary objects and transactions for the users to continue their work during
the upgrade. It should be withdrawn once all upgrade activities is completed.

10) What does SAP_NEW consists of?

SAP_NEW is a SAP standard Profile which is usually assigned to system users

temporarily during an upgrade to ensure that the activities and operations of
SAP users are not hindered during the Upgrade. It contains all the necessary
objects and transactions for the users to continue their work during the upgrade.
It should be withdrawn once all upgrade activities is completed, and replaced
with the now modified roles as it has extensive authorizations. The SAP_NEW
profile grants unrestricted access to all existing functions for which additional
authorization checks have been introduced. Users can therefore continue to work
uninterrupted with functions not previously subject to authorization checks. This
ensures upwards compatibility.

11) Which profile is regarded as Backdoor to SAP_ALL? S_A.SYSTEM

12) Standard profiles other than SAP_ALL and SAP_NEW? S_A.SYSTEM and S_A.DEVELOP
13) What is the T code for Table access? SE16
14) What is the difference between SE16 and SE16N?

SE16:
** SE16 is a data browse and it is used to view the contents of the table and we cannot change
or append new fields to the existing structure of the table as we cannot view the structure level
display using the SE16 .

SE16N:
** The transaction code SE16N (general table display) is an improved version of the old data
browser (SE16). It has been around for some time, but is not widely known amongst
consultants and end users of SAP. It looks a bit different to the old “data browser” functionality
(SE16).

** Once you have entered your table name, type "&SAP_EDIT" without the quotation marks
into the transaction code. This enables editing functionality on SE16N and allows you to make
table changes. This allows you to access both configuration and data tables which may be
otherwise locked in a production environment.

15) Auth Objects related to Table access?(s_tabu_dis,s_tabu_lin,s_tabu_nam)

16) List some Critical Auth Objects?
17) SQVI ?
18) Which table gives list of Illegal passwords? USR40
19) Password is not DOWNWARD COMPATIBLE. What does that mean?
20) What is the T code to create T code? SE93
21) What is the T code to create Authorization field?
22) What is the T code to create Authorization Object?
23) What is the T code to create Authorization class?
24) What is the difference between SU24 and SU25?
25) Which tables store the data of SU22?
26) Which tables store the data of SU24?
27) What is the difference between USOBT and USOBX?
28) How many types of roles are there?
29) Difference between Derived role and master role?
30) Why do we need derived role?
31) How can a role be assigned to user other than SU01?
32) Can you modify derived role?
33) If you want to modify the Derived role, what needs to be done?
34) What are the defaults clients created after Installation?
35) What is client?
36) What the defaults users / Super users created after installation?
37) What is the troubleshooting T code in R/3 Security?
38) If you are not able to find any issue in SU53, how do you proceed?
39) What does RC stands for in case of ST01?
40) What are different RCs we get in ST01 and what do they mean?
41) What is difference between USOBT_C and USOBX_C?
42) What is Composite role?
43) What is IDES?
44) What Auth Objects are required to maintain USER MASTER RECORDS?
45) How do you change auth fields into org fields?
46) What are the different statuses of Auth objects in SU24?
47) What is PFCG_TIME_DEPENDENCY?
48) Why do we do User comparison?
49) What are the 3 options in Expert mode in PFCG?
50) Which option of Expert mode is mostly used?
51) Why do we do User comparison?
52) What is the landscape in your last Project?
53) What is the current project you are supporting and say something about your role in that
project?
54) Do you have implementation experience?
55) Do you have upgrade experience?
56) Other than R/3 or ECC what all modules you have worked on?
57) Did you work on PORTAL Security?
58) How to view all transport requests created for a single role?
59) Difference between by adding a Tcode in Menu Tab and direct in Authorization page