If you're preparing for SAP Security interviews, here's a simplified list of key questions and answers to help you succeed. Whether you're a fresher or experienced, these questions cover essential concepts.
Top 10 SAP Security Interview Questions:
What is SAP Security? SAP Security ensures users get appropriate access based on their roles and responsibilities.
What are roles in SAP Security? Roles group transaction codes (T-codes) and authorizations needed for specific tasks.
Difference between single role and derived role?
Single Role: You can add or remove T-codes.
Derived Role: Inherits T-codes and authorizations but can’t modify them.
What is SOD in SAP Security? SOD (Segregation of Duties) prevents conflicts and reduces fraud risks by separating tasks.
What is a user buffer? It’s a temporary storage of a user’s authorizations created at login.
What is user comparison? It updates user master records with assigned roles and profiles.
What is a derived role? A role that inherits menu structures and functions from a parent role.
What are the common SAP Security T-codes? Examples: SU01 (Create/Change User), SU53 (Auth Analysis), PFCG (Role Maintenance), ST01 (Trace).
What are different types of users in SAP? Types include Dialog, System, Communication, Service, and Reference users.
How do you lock all users in SAP? Use T-code EWZ5.
Best SAP Security Questions
Difference between USOBX_C and USOBT_C?
USOBX_C: Defines which auth checks are active.
USOBT_C: Proposes default authorization values for transactions.
Steps before assigning SAP_ALL?
Enable audit logging (T-code SM19).
Retrieve audit logs (T-code SM20).
What is an authorization object? A set of fields that define permissions for specific activities.
How to delete multiple roles from systems?
Add roles to transport.
Delete roles and transport them across systems.
Steps before running a system trace? Assign SAP_NEW or SAP_ALL to ensure no authorization failures.
Max profiles and objects in a role?
Profiles: 312
Objects: 170
T-code to lock/unlock transactions? Use T-code SM01.
What is PFCG Time Dependency? A report (T-code PFUD) that removes expired profiles from user records.
What are the main PFCG tabs?
Description: Role details.
Menu: User menu design.
Authorization: Authorization data maintenance.
User: Assign users to roles.
T-code to delete old security audit logs? Use T-code SM18.
Advanced SAP Security Questions
Program to regenerate SAP_ALL profile? AGR_REGENERATE_SAP_ALL.
Table to display T-code text? Use table TSTCT.
How to display a user buffer? Use T-code SU56.
Table to determine single roles for a composite role? Use table AGR_AGRS.
How to monitor security audit filters? Parameter:
rsau/no_of_filters.What are composite roles? Groups of roles assigned together to simplify user management.
Most common SAP Security T-codes?
SU01: Create/Change User.
SU53: Authorization Analysis.
ST01: Trace.
PFCG: Role Maintenance.
How to enforce password rules? Use a profile parameter for password policies.
What is the T-code for authorization group creation? Use T-code SE54.
How to check background jobs? Use T-code SM37.
General Questions
What are role templates? Predefined activity clusters with transactions, reports, and web links.
Steps to create a user group?
Use T-code SUGR.
Provide a group name and description.
How to check transport requests created by others? Use T-code SE10.
How to find system default security parameters? Use T-code RSPFPAR.
T-code for copying USOBT and USOBX data? Use T-code SU25.
Purpose of ST01 T-code? For tracing user authorizations.
Max T-codes in a role? Up to 14,000 T-codes can be added.
Table to store illegal passwords? Use table USR40.
What is the max number of roles per user? 312 roles.
T-code to display user lists? Use T-code SM04 or AL08.
How to manage lock entries? Use T-code SM12.
Difference between role and profile?
Role: Groups T-codes and authorizations.
Profile: Technical representation of a role.
What are profile versions? Updated versions of profiles created after modifications.
This simplified list is designed to help you focus on key SAP Security concepts and T-codes to ace your interviews.
Comments Comments