1.How many transactions codes can be assigned to a role?

To a role maximum of 14000 transaction codes can be assigned.

2.Mention which table is used to store illegal passwords?

To store illegal passwords, table USR40 is used, it is used to store pattern of

words which cannot be used as a password.

3.Explain what is PFCG_Time_Dependency ?

PFCG_TIME_DEPENDENCY is a report that is used for user master comparison. It also

clears up the expired profiles from user master record. To directly execute this
report PFUD transaction code can also be used.

4.Mention different tabs available in PFCG?

Some of the important tab available in PFCG includes

Description: The tab is used to describe the changes made like details related to
the role, addition or removal of t-codes, the authorization object, etc.
Menu: It is used for designing user menus like addition of t-codes
Authorization: Used for maintaining authorization data and authorization profile
User: It is used for adjusting user master records and for assigning users to the
role

5.Which transaction code is used to display the user buffer?

User buffer can be displayed by using transaction code SU56

6.Mention what SAP table can be helpful in determining the single role that is
assigned to a given composite role?

Table AGR_AGRS will be helpful in determining the single role that is assigned to a
given composite role.

7.How can we check table logs?

First, verify whether logging is enabled for a table with t-code SE13. If enabled,
the table logs can be viewed using the SCU3 t-code.

8.What is PFCG Time dependency?

The PFCG time dependency is a report that is normally used to compare the user
master. The PFCG Time dependency also erases all profiles of the main record that
appear to be of no use or have expired. PFUD is a transactional code which can be
used to carry out this particular action.

9.What are the user lock values?

The user lock values are as follows:

00 indicates not locked

32 indicates Locked by CUA central administrator
64 indicates Locked by the system administrator
128 indicates Locked following a connection failure.

10.What are the transactional codes frequently used in SAP security?

Following are the transactional codes that are frequently used in SAP security:

SU53 to authorize the analysis,

ST01 to trace,
SUIM to reports,
SU01D to the display user,
SU10 to bulk changes,
PFCG for maintaining roles, and
SU01 to create or change the User.

11.What is the Personalization Tab in a role?

Personalization is one way of saving information that can be shared by the users.
For example, create SAP Queries and control authorizations by the user groups. This
data will be stored in the personalization tab of the role.

12.What do you mean by the USR40 table?

This table stores all illegal passwords that include a pattern of some words that
are not useful for setting passwords.

13.What is meant by T-code in SAP?

In SAP, T-code refers to transaction code that helps to run a program within the
SAP application.

14. How to troubleshoot an issue for a background user in SAP security?

Using the T-code ST01, we can troubleshoot an issue for a background user in SAP
security.

15. What is use of derived roles and where it is used?

Derived roles are also called as Child Roles and Master

Roles are called as Parent Roles.

Derived Roles refers to the roles that already exist. As

name indicates Derived roles are derived from other role
(Master Role).

Derived ROles inherits the menu structure and functions

included (transactions, reports, Weblinks and so on) from
the role referenced.
The default authorization values of the derived role are
that of the inherited role. The Org Levels are to be
maintained in the derived Role

16.How can we convert authorization field to ORG.field?

The report PFCG_ORGFIELD_CREATE is used for converting an authorization field to

Org field. It can be excuted using SE38/SA38 T-code

17.How do we find all activites in sap?

All activites are stored in the TACT Table. This table can accessed via SE16 T-CODE

18.How to check list of the roles are assigned to user ids in the sap system?

AGR_USERS
19. What is the use of AGR_TCODE Table ?

20. How to track role changes details?