cancel
Showing results for 
Search instead for 
Did you mean: 

difference between "change auth data " and "expert mode" in pfcg

Former Member
0 Kudos

Gurus ,

i need to know , what is the difference between

"change authorization data "

and

"expert mode for profile generation" in PFCG .

and what is the significance of the three options that we get when we choose expert mode ?

Accepted Solutions (1)

Accepted Solutions (1)

Former Member

Hi Susin,

Both Change auth data and Expert Mode are used to change authorization data.

change auth data option is similar to edit old status option of expert mode

Where expert mode provides you more options as explained below .

1. Delete and recreate profile and authorizations

All authorizations are recreated. Values which had previously been maintained, changed or entered manually are lost. Only the maintained values for organizational levels remain.

2. Edit old status

The last saved authorization data for the role is displayed. This is not useful, if transactions in the role menu have been changed.

3. Read old status and compare with new data

If you change transactions in the role menu, this option is the preconfigured. The profile generator compares the existing authorization data with the authorization default values for the menu transactions. If new authorizations are added during this process, they receive the status New. Authorizations that already existed receive the status Old.

for more details you can go through this link

http://help.sap.com/saphelp_nw04/helpdata/en/52/67151e439b11d1896f0000e8322d00/content.htm

Hope this helps.

Thanks,

Rakesh.T

Former Member
0 Kudos

so if we are adding a new transaction then we need to select 'expert mode with ' Read old status and compare with new data ' . is this correct ?

the problem i faced is

-i added a new tc say 'x' to an existence role

- generated authorization using 'Chane authorization mode' .

- after that i removed the added t-code 'x', and clicked 'Chane authorization mode' , but now still i could see the object pertaining to the removed t-code 'x'

how this could be possible ,

is this correct ?

Former Member
0 Kudos

Hi Susin,

After even removing the t-code from the menu and generating the profile you find that the t-code is actually not removed.

This is because your auth. object S_TCODE is no more in standard mode.If you go into the role and look for S_TCODE you would find that it is in Changed status.

Once the S_TCODE object gets into CHANGED status, T-Code deletions made in the menu path DO NOT override the T-Code value in S_TCODE. The T-Code doesn't exist in the menu, but can be called because it still exists in S_TCODE.

This is how the profile generator is designed to work. When you add the T-Code into the menu, SAP will bring in the necessary objects/values. The only exception here is when working on non-end user roles, roles used in Development and Integration that use ranges in S_TCODE.

When deleting T-Codes, check to see that S_TCODE is in STANDARD status. If it is in CHANGED status, take these steps to get S_TCODE back into STANDARD status:

Inactivate and delete the S_TCODE object using the trashcan.

Use the u201CExpert mode for profile generationu201D button to regenerate the role from the T-Code menu entries:

Check the u201CRead old status and merge with new datau201D button. This will merge the objects with an u201COldu201D status with new objects pulled in from the current SU24 configuration:

The S_TCODE object should now be in STANDARD status.

Maintain any yellow objects, merge, reorganize, save, and generate.

Thanks,

Saby..

Former Member
0 Kudos

Hi all,

as said by RUDRA

  • Once the S_TCODE object gets into CHANGED status, T-Code deletions made in the menu path DO NOT override the T-Code value in S_TCODE. The T-Code doesn't exist in the menu, but can be called because it still exists in S_TCODE.*

need some clarifications regarding this.

because as far as my experience is concerned " S_TCODE gets updated as and when the transaction is added or deleted in the role menu.

regards,

kavitha

Edited by: kavitha l on Oct 16, 2008 1:11 PM

Edited by: kavitha l on Oct 16, 2008 1:12 PM

Answers (4)

Answers (4)

Former Member
0 Kudos

Hi,

To add !!!

When changes to the role like tcode addition/deletion is carried out through "change aut data" many duplicates may come into the pfcg with stats "new". If expert mode is used then values are pulled from su24 if maintianed.

Have a look at the following notes which explains use of both options.

note #113290

note #679050

Rakesh

Former Member
0 Kudos

Hi Susin,

Yes what you said is correct through expert mode it is option you need to select, even if you use change authorization data also it will work as both these options work as same.

Reg your problem,

can you check once after deleting the transaction if you have selected change auth data it will not show anything as it is same option as that of "Read old status and compare with new data" .

but in expert mode if you select option edit old status the previous objects will remain same.

even if you select display auth data it will show previous objects as you have.

Hope this helps,

Regards,

Rakesh.T

Former Member
0 Kudos

Susin,

Can u tell what three options u get when choose the option for expert mode.As when u choose the expert mode u shd get the templates , same as while choosing the change authorisation data.

Please clarify the three options.

Regards,

Amit

Former Member
0 Kudos

Hi Susin,

To change the authorization data for the transactions assigned to the role, choose Change Authorization Data or Expert Mode for Profile Generation.

If you are generating the profile for the first time, there is no difference between the two modes.

When you change a role, you must regenerate the authorization profile. In this case, the status of the profile generation is displayed red or yellow at the top of the Authorizations tab page.

If the status display is red, you must perform an authorization data comparison, since the menu was changed since the last profile generation or no authorization data exists.

If the display is yellow, the authorization data for the role was changed and saved after the last generation. The generated profile is no longer current. You need to regenerate it.

The significance of the three options that we get when we choose expert mode is as follows:

Choose one of the options to maintain the authorization values (in normal mode, the correct option is automatically set):

1> Delete and recreate profile and authorizations

All authorizations are recreated. Values which had previously been maintained, changed or entered manually are lost. Only the maintained values for organizational levels remain.

2> Edit old status

The last saved authorization data for the role is displayed. This is not useful, if transactions in the role menu have been changed.

3> Read old status and compare with new data

If you change transactions in the role menu, this option is the preconfigured. The profile generator compares the existing authorization data with the authorization default values for the menu transactions. If new authorizations are added during this process, they receive the status New. Authorizations that already existed receive the status Old.

Note the following during the comparison:

Values for organizational levels that are no longer required are deleted, all others are retained. If new organizational levels are added, you need to maintain them.

The standard authorization for the object S_TCODE is always automatically filled with the current transactions from the role menu. It cannot be copied or manually changed, only deactivated.

Thanks,

Saby..