Sap Basis Interview Questions and Answers For Experienced
Sap Basis Interview Questions and Answers For Experienced
2. What is the purpose of SAP Early watch client? What is specific about its configuration?
4. How a table should be configured, so to be able to maintain entries in the quality and productive
environments?
5. You want to deploy SAPGUI along with a default list of SAPLogon sessions. Which scenarios should
be followed?
6. What are the classes into which background jobs can be divided? What are their features?
Install dialog and central instance (Start à Programs SAP system setup of install
DialogandCentral and Database instance .
PARAMETERS:
1.Memory
2.Number of parallel process
3.Instance number
4.SID
5.Central Transport host
6.Data base name
7.Sap data.. Up1 to Data six locations.
What Is St03 ?
Workload Analysis.
Scheduled
Ready
Released
Active
Finished
Cancelled
If A User Complaints That He Could
Not Execute Some Of The Transaction
Codes Then What Will You Do ?
Use T-code SU53 , This will show which authorization is missing in his profile.
Start Profile
Instance Profile
Depend upon the load, according to module we have to configure logon groups.
If belongs to insufficient memory dump error display at which stage the transaction
terminate and how much memory requires. So that we have to increase the memory
(Through Instance profile).
If belongs to table space error it displays the table name so that we increase the table
space through the SAPDBA.
If belongs to program error we have analysis the ABAP program through se30.
If u have second application server than we have to configure the logon groups.
/vc_column_text]
If you are copying to a newly created client then it is more appropriate to say “client copy.”
Another way of thinking about this is that a client copy from production to a QA server or
from production to DEV server is really a client refresh.
The Job
``sap_collector_for_perfmonitor`` Is
Being Continuously Being Cancelled In
Our Quality System Bw. I Keep
Receiving An Error That Says The
Load Program Is Not Found. What
Should I Do To Resolve This?
The problem is in the support package. The Solution is you need to delete the SWNC*
reports and insert RSSTAT83 and RSSTAT87 into TCOLL.
I Am Attempting To Complete A
System Copy Of Bw. When I Try To
Go In To Rsa1 Afterwards I Get The
Error Message, ``entry In Inbound
Table Already Exists.`` What Should I
Do To Solve The Problem?
Read the homogenous system guide and follow all directions under “subsequent steps”
section. Check transaction codes BDLS and SALE as well.
scheduled.
2. Define OSP$.
Mainly two types of user mechanisms named, OPS$adm and OPS$SAP are used in order
to connect as well as communicate with the database internally. In the system of SAP,
these services get created automatically.
RFC is the abbreviation of Remote Function Call. This is a type of mechanism which helps
in communicating as well as exchanging various types of information across the other SAP
systems.
Transactional RFC allows the processing of the sent request for an error in the system, only
once. This is done after allocating an ID for the transaction process which is also known as
TID. It is different from asynchronous RFC only in this aspect. The availability of the remote
system is not necessary at the present moment in the T RFC.
JSPM is the abbreviation of Java Support Package Manager which is used in order for the
application of support packages on the deployed components of the software. Basically,
JSPM is an important tool that helps in the installation of the packages and also all the
components. To deploy packages, JSPM often uses SDM.
On the other hand, SDM which is the abbreviation form of Software Delivery Manager helps
in importing Support Packages of Java. This is also used for deploying software packages
and also used to manage them. These packages are said to be received from SAP.
6. Differentiate between support package, SAP note, and kernel.
SAP note is used to implement the removal of errors in a single program or a transaction.
The kernel is the one that contains .EXE files which are also known as executable files. The
older version of these files gets replaced after Kernel gets upgraded.
SAP system defines SAP singlet stack system. These can have two types of runtime
engines like JAVA or SAP Netweaver as ABAP. An example – Single Stack System (JAA)
is basically SAP Enterprise Portal System (Ep). On the other hand, Single Stack System
(ABAP) is basically SAP ERP (ECC).
9. List the various kinds of user types in the SAP system. Define each one of them.
There are five different types of user systems in the SAP system. These are as follows –
Dialog user – Mainly for accessing the interactive systems from GUI, this type of
server is used.
Communication User – For external RFC calls, this type of user is used.
System User – System User mainly helps in the background processing and intra
system communication.
Service User – Anonymous and a large group of users mainly use this type.
Reference User – Allowance of assignment of extra authorization is done by this
user. These are not related to persons as users.
10. Define SAP GUI.
SAP GUI is basically a client tool that helps in accessing the central server and also runs on
various operating systems like UNIX, Microsoft Windows, and Mac etc. SAP applications
like the SAP Business Intelligence System and SAP ECC are all managed by SAP GUI.
11. What are the different standard clients found in SAP Basis? How can a new client
be created in the SAP System?
There are mainly three standard clients and these are as follows –
000 – This becomes available with the installment of the R/3 system. This is also
known as the master client.
001 – Basically, 001 is just a copy of 000. It has a test copy. In order to create new
clients, this is used.
066 – This client is known as the SAP Early watch. If diagnosis and monitoring
services are required in the SAP system, this is used.
The transaction code which is to be used in order to create a new client is SSC4.
Click on New Entries and put the details like City, Client number and name and
Currency and the Roles, etc.
Data specific to the client needs to be entered and permission must be set.
Click the save option.
1. Manually or forcefully
2. Automatically
For single-user and for multiple users, transaction to be used is SU01 and SU10
respectively.
The conditions must be specified in order for the background job to be started. This is said
to trigger the starting of the job. The following are the different kinds of start conditions that
are to be used in order for the background job to be started –
Immediate
After Job
Date/Time
After Event
At Operation Mode
14. Mention the various categories which help in executing SAP Background jobs.
Class A – High Priority: This category is mainly used for very critical and urgent
tasks. Hence, these tasks also get scheduled with class A priority job. Maybe one or
more than that background work process gets reserved by a Class A job.
Class B – Medium Priority: After the Class, A priority jobs get completed, these
types of jobs get executed.
Class C – Low Priority: After the completion of jobs of classes A and B, the job of
class C gets started.
15. Mention the SAP GUI types suitable for various kinds of users.
Users who are working the SAP system mainly use SAP GUI for Java or SAP GUI for
Windows.
For users who are working as ABAP developers, SAP GUI for Windows is used.
When the operating systems of the users are not Microsoft, SAP GUI for HTML and
SAP GUI for Java are mainly used. However, they can also use SAP GUI for
windows.
For the integration of Dynpro transactions to the Portal, mainly SAP GUI for HTML is
used. Dynpro-based applications are well integrated with the help of this, into the
portal.
16. How can instances be created in the SAP system? How can these be configured?
Instances in the SAP system get created when the system gets installed and configured.
Processors, memory, and other resources get referred to by these instances. Various
sources can be shared by users after logging in to the system. This is also allowed by the
SAP instances. These are managed by CCMS. Users use them to log in to the SAP system.
One or even more than one instance can be present in the SAP system. Using only one
CCMS, only one instance can be set up in the system. Two or more of those instances can
be used to configure the system.
The following points are to be kept in mind in order to configure an SAP instance –
to be created.
Data sharing across the SAP system is not available in the private mode as these data are
allocated to specific users exclusively. Due to the exhaustion of the extended memory, this
type of mode occurs.
18. Can you install SAP patches when all the other users are active or online?
When all the other users are online, the SAP patches can’t be installed. This is because
these patches will not be able to be updated and terminated by the support manager.
Hence, the best time to install SAP patches is when there is an absence of users’ login in
the SAP system.
20. Where does the list of repaired objects gets stored in the SAP system?
The list of repaired objects gets stored in the system including ADIRACCESS keys.
Parameter Tab cab is used to allow access to the T-code which is assigned to the users to
work on.
Personalization Tab can be used to connect RFC across the various systems.
In service users, passwords are not checked as the rights over the passwords are only
entitled to the admin. Users can’t make changes to the passwords. Anonymous users use
service users. Multiple logins are also possible.
GUI login is not possible for the reference user. User authorization from one user to another
is made possible by this during an emergency.
25. What are logon groups?
Logon groups are mainly defined with the help of Tcodesmlg. At first, the group needs to be
created and then the instances are to be assigned for those groups.
26. Mention the tools which are to be used in order to install JAVA patches.
SAP installer that is SAPinst.exe is to be employed in order to use or install JAVA patches.
These patches can be deployed with the help of JSPM or also known as Java Support
Package Manager and SDM or also known as Software Delivery Manager.
Data transfer can be successfully conducted with the help of using BDC. There are three
functional modules namely,
BDC_OPEN_GROUP: In this module, mainly the client and sessions as well as the
user names get defines specifically.
BDC_INSERT: Data can be inserted from one session to another with the help of
this module.
BDC_CLOSE_GROUP: Mainly used for closing the batch input session.
Client refresh mainly includes copying or overwriting to an existing client. However, if the
newly developed client gets copied, this is called client copy.
The full form of business KPIs is Key Performance Indicators. The performance of a
company gets indicated strategically with the help of KPIs. The performances of the
company get compared with the growth of the company. In this way, KPIs help in leading
the company by keeping a good track. It also helps in doing a comparison between various
market leaders.
The SAP system gets installed with German and English as the default language.
Supplementary language gets installed in order to get other languages.
1. Presentation
2. Database and
3. Operating system Interface
32. Define SAP R/3 Basis?
SAP R/3 Basis - A administration platform that allows managing all SAP applications, R/3
network, monitoring, and so on...
Presentation layer
Application layer
Database layer
34. Which transaction code used for managing lock entries in SAP?
35. For displaying the user list, which transaction code used?
Job Scheduling
Job Processing
Job Overview
Spool asks for are produced amid discourse or background processing and put in the spool
database with data about the printer and print arrange. The genuine information is put in the
Tem Se (Temporary Sequential articles).
38. At the OS level in SAP, where can we check the system log?
Go --> SAP Management Sonsole --> "system logs" Under SID {or} You can
check "/usr/sap//system/logs" directory.
The purpose of the SAP T000 table is you can view the list of user those are defined in the
SAP system.
41. Which table can be used for SAP user login data?
Private mode is a mode where the heap data is getting exclusively allocated by
the user and is no more shared across the system. This happens when your
extended memory is exhausted.
There is a “delete” button when you define the queue. If you already started the
import it’s no more possible since the system will become inconsistent.
6.What is mysap?
It’s a term for all the systems that in a contract (e. g. a MySAP business suite
consist of ERP2005, CRM2005, SRM2005).
7.What is ASAP?
It’s an old term for an implementation strategy. Blueprint -> prototype ->
goLive (if you want to say it in one sentence).
ST02 / ST03 In general via table buffers, you could go into the whole Work
Process, roll in, roll out, heap (private) memory, etc. however just as a Unix or
DBA admin would know, is you look this up when needed for the exact specifics.
www.allindiajobs.in
9.Using Tcode SGEN I have generated 74% job and later I have terminated the job. I
wish to start generating from where it stopped I have refreshed but to no chance
nothing was done. How should I further proceed so as to complete the remaining
job ?
Start SGEN again and select the same you have selected before. It will popup
and ask if you want to start from scratch or generate the just the remaining.
A “transactional RFC” means, that either both parties agree that the data was
correctly transfered – or not. There is no “half data transfer”.
OPS$ is the mechanism the <SID>adm users uses to connect to the database.
The developer key is a combination of you installation number, your license key
(that you get from http://service.sap.com/licensekey) and the user name. You
need this for each person that will make changes (Dictionary or programs) in
the system (allindiajobs.in).
13.How to see when were the optimizer stats last time run? We are using win2k,
oracle 9, sapr/3 46c.
Assumed DB=Oracle
Select any table lets take MARA here but you should do the same for MSEG and
few others to see whether the dates match or not.Run the following command
on the command prompt :-
select last_analyzed from dba_tables where table_name like ‘%MARA%’;
This gives you a straight answer .Else you can always fish around in DB14 for
seeing when the optimzer stats were updated.
14.I would like to know the version or name of SAP that is implemented in real time?
This is a very generic question and really depends on what you are
implementing (modules).
The history of the “R/3” is
3.0D Basis 300
3.0E Basis 300
3.0F Basis 300
3.1H Basis 310
3.1I Basis 310
4.0B Basis 400
4.5B Basis 450
4.6C Basis 460
4.71 Basis 6.20
4.72 Basis 6.20
5.00 Basis 6.40 (ECC 5.0 – Enterprise Core components)
6.00 Basis 7.00 (ECC 6.0) – actually in RampUp
All of those have increased business functionality and interfaces to other
systems (CRM, BW etc.)
15.How should I set priority for Printing say like user, team lead, project manager?
There’s nothing like “priority” settings for spool processes. Just define more
(profile parameter rdisp/wp_no_spool) processes so people don’t need to wait.
16.What is the use of Trusted system. I know that there is no need of UID and PWD to
communicate with partner system. In what situation it is good to go for Trusted
system ?
E. g. if you have an R/3 system and a BW system and don’t want to maintain
passwords. Same goes for CRM and a lot of other systems/applications.
17.Why do you use DDIC user not SAP* for Support Packs and SPAM?
Do _NOT_ use neither DDIC nor SAP* for applying support packages. Copy
DDIC to a separate user and use that user to apply them
This also depends on what your are implementing, how many users will work on
the system, how many records in what area are created etc.
We need a BIG database system and an even bigger application servers.
19.Let me know if my understanding below is correct:
Note: if you want to transport from different system(SID) means we can use
SCC9 or SCC8 tcode by selecting SAP_USER profile in other terms called
client copy or client refresh.
27. How to check list of tcodes within a SAP system and where to look for tcode
names and program values.
28. How we can disable the “IMPORT ALL” button on STMS tcode?
This table contains a list of defined clients within a system where we can
maintain tcode SCC4.
USR02 table stores user logon data like usernames, encrypted password,
creation date…etc
33. How can you check/tell if a transport entry is in the process of being
imported?
SAP basis acts as an operating system or a platform for SAP applications to run. It
supports the entire range of SAP applications.
2) What is the difference between Developer Trace, System Log and System
Trace?
System Trace: When you want to record internal SAP system activities, system
trace is used. The trace is useful in diagnosis internal problems within SAP
system and the host system.
System Log : To know the recent logs for application server and CI, System
log is referred.
Developer Trace: In the event of problems, developer trace, records the
technical information about the error or problem
For problem analysis and system monitoring Developer trace or System log is used.
3) In a situation where My SAP system is down (Users unable to login to SAP
system), how to analyze the problem?
In private mode, the heap data is exclusively allocated by the user and is no more
shared or available across the system. This occurs when your extended memory is
exhausted.
Two users “OPS$adm” and “OPS$SAP” Service are created in your SAP system and
to connect and communicate with database internally this user mechanism is used.
6) What are the different types of RFC and explain what Transactional RFC is?
OCM stands for online correction system, by using SPAM you can apply OCM
Patches.
To export or import tables in SAP from OS level you have to follow three steps and
by using R3trans utility in SAP
Step 2: Check whether enough disk space is available in the directory where you
going to export.
Step 3: Create two control files for R3trans which will be used for import and export.
9) What is the difference between – support package, kernel and SAP note?
Kernel: Kernel contains the executable files (.EXE) like other applications and when a
Kernel upgrade is done a new version of the EXE file replaces the older versions.
Support Package: SAP support packages is a bunch of corrections, this can be used by
applying transaction SPAM
10) How can you find the list of objects that have been repaired in the system?
The list of objects that have been repaired can be found in the system having
ADIRACCESS keys.
12) Is it possible to install SAP patches when other users are online?
When other users are online we can’t install SAP patches, as support manager will not
be able to update and it will terminate it. So it is always feasible to better apply
support packs when there is no users login into the system.
14) What is the procedure to disable import all option from STMS in SAP?
Go to STMS T-code
Go to menu option overview
Select System
Choose SAP System
Go to transport tool tab
Create parameter “No_Import_All” with value set as 1
Save it
15) Mention the use of personalized tab and parameter tab in user master
record?
Parameter Tab: It will allow access to assign T-code on which one has to work
Personalization Tab: It is required for RFC connection between systems other than
user personal information
Dialog Users
System Users
Communication Users
Service Users
Reference Users
18) Explain how you can restrict multiple logins of user in SAP? What are the
thing you have to take care of while writing the ID’s?
b) login/disable_multi_gui_login= List out the users that should be allow to logon for
multiple times
While writing the user ID’s things to be taken care are, list the user IDs separated by
commas “..” , between user IDs do not leave space characters and to see the changes
restart the R/3 instance.
19) At OS level how you can change the number of work process? How you can
analyze the status of work process at OS level?
To change the number of work process at the OS level, you can increase the no. of
work processes by modifying the parameter rdisp/wp_no_=
A single stack system is defined by SAP system either with JAVA as runtime engine
or SAP Netweaver as ABAP.
Eg: Single Stack System (Java) is SAP Enterprise Portal System (Ep)
To use the JAVA patches , SAP installer (SAPinst.exe) is employed. SDM and JSPM
are the latest versions of tools used to deploy Java Patches.
To solve queries which cannot be solved by using the method interfaces, a set of
information is used. This set of information is known as “ Data Sets”.
24) At O.S level where to check for system logs of SAP application?
To check the system logs of SAP application at OS level, SAPMMC -> SAP systems
-> SID -> SysLog
28) Explain what is an “OK” code is and what is the difference between “t-code”
and “OK” code?
An “OK” code is used by a program to execute a function for example after a push
button has been clicked.
Client refresh is overwriting or copying to existing client, while copying the newly
created client is called client copy.
To check the schedule background jobs and to execute them parameters like
rdisp/btctime is used. These parameters define background processing batch
scheduler.
Dialog
Enque
Update
Background
Spool
Message
Server
Gateway
Application Server takes the request from the user and if the request requires data then
it connects to the database server and gives output.
Customising Request
Workbench Request
Transport of Copies
Re-location
Table T000 contains a list of defined clients, where we can maintain transaction code
SCC4.
40) What is SAPS ?
SAPS stands for SAP Application Performance Standard, which is a hardware
independent unit which describes the performance of a system configuration in SAP
environment.
Central Instance has message server and dialog, update, spool, enque, gateway,
background work processes.
Application server has dialog, update, spool, gateway and background work process.
42) In what ways you would know whether a system is Unicode or Non-unicode?
By code sm51 t-code we can see whether it is Unicode or non-unicode. In this code
we can find the release notes button in the application tool bar if you click on that you
can see the total information like Database, Kernel version, Unicode or non- Unicode.
43) In SAP basis what are the different types of transport requests?
Customizing request
Workbench request
Transport request
Relocation
46) On a particular system how you can get a list of the users with development
access on a particular system?
By using table “DEVACCESS” you can get a list of the users with development
access.
To view locked transactions you need to look in field CINFO, table TSTC. Within
SAP you can either use SE11 or SE16 to browse the table contents. Make sure that
you enter “A0” as the “HEX01 data element for SYST” starting value and “A9” as the
ending value. This will list all the transactions locked in the system.
48) What is an ‘OK’ code? What are the differences an ‘OK’ code to a ‘T-
code’?
49) How you can disable the ‘Import All’ button on STMS for the queues?
53) Which are the most frequent errors encountered while dealing with
TRANSPORTS ?
Synchronous Transport - Dialog or batch process are blocked until import is ended
55) How will determine whether your SAP server is Unicode or ASCII ?
Go to SM51 , Click Release Notes. Entry corresponding to ICU Version will tell you
whether your system is ASCII or Unicode.
1. Customizing Request
2. Workbench Request
3. Transport of Copies
4. Relocation
In consolidation route - objects can be changed and they can transport from one
system to other. This is the route between development to quality
In Development route - Objects can not be changed and they can not be transported
from one system to other. This is the route between quality to production
58) How will you define logon groups ? What is Load Balancing in SAP ?
SAP does support many other language which may not full translate from the default
English and German. To fill this gap , Supplementary language (a program) is
installed.
NO . SAP is not a database but it uses databases from other vendors like Oracle.
Although SAP has recently released its own database HANA
ST02 , RZ10
Q.What is the profile?Ans: Profile is what a user can do within that role that is assigned
to the user. When a role is created; a profile is created based on the authorization data
i.e. object class, authorization object, filed and values. The word "profile" is used in 2
different concepts. 1) Authorization Profiles 2) System Profiles Authorization Profile:This
profile is the one created when a role is created and is called as authorization profile.
System Profile: This profile exists to change the parameters for the instances...Q.I want a
list of users along with roles for a client? How to do it?Ans: We can use tcode se16
in it AGR_USERS uname: enter the user ids and AGRname: role name Youcan get in
SUIM also.Q.In an environment of derived roles; a user is asking for a t-code; which
is not found in suimin search of roles? What will u do? Ans:
So after doing all these you are not able to find any end user role available in system.
Next step is the proposal of adding the tcode to a suitable role. as it's a derived role
envi---> need to add the tcode in template / parent role Take approval from BPR/role
owner for role modification. They will decide which parent role to change. Change role
in Dev and transport to rest of the sys in landscapeQ.Can u secure profiles? If so , how
to do it ?Ans: Yes you can. Secure Profile S_User_PRFQ.I want to lock all the users
except sap* and DDIC of a particular client ?Ans: SU10 F4 on user id field Change the
hit list restriction according to users present Enter It will bring all available users Remove
SAP* and DDIC from list Select all and enter It will bring u back to SU10 With all users
except SAP* and DDIC Select all Lock it will lock your user also (OR) We can do it by
ewz5Q.I want to delete 1000 users of a particular client, how can I do it?Ans: You
can create a SECATT script to delete the users which is easy to create and easy to
execute. You can also delete users of a particular client by using t-code su10.Q.Can u
tell me some of the password related parameters ?Ans: Password related parameters
are: login/min_password_lng (Defines minimum length for password)
login/min_password_digits login/password_expiration_time These are the main
parameters - which can be maintained via RZ10 (OR) You can go to t-code se16 Write
login/* and enter ... then u will get all login parameters Here there is no need of
rememberingQ.How can I assign a same role to 200 users?Ans: You can do using
PFCG- > enter the role -> change -> go to users tab -> paste the users -> click on user
comparison-> complete comparison -> Save the role - it's done (OR) One can also use
"Authorization Data" functionality in transaction SU10 to complete this task.Q.A user is
asking for a t-code to assign? How do you assign the t-code?Ans: First we have to
check if user has access to particular tcode. If not then run suim with roles by complex
selection criteria -->put object1 as S_tcode as the required tcode and hit execute
button. The query will fetch you a result of roles. Select a role that has minimum
authorization and satisfy the user requirement. And assign the role to user.Q.A user is
not able to execute a t-code; how do you solve that? What are the different
reasons that might be existing?Ans: Reason:
How to solve: 1.check if the user is having the tcode or not. by SUIM--> role by complex
selection criteria
2. if the tcode is not assigned to user -->assign suiatablle role after taking approval.
Make sure to user
compare to update the user master record 3.if the tcode is available for the user and
user still cant access--> ask for result of SU53 screen shot, there might be some other
authorization which is missing for the user 4.we can also trace the user's auth check by
use of st01 fine searching user's missing access by analyzing st01 report and rc. Q.What
is difference between se16 and sm31?Ans: SE16: table display SM31: table, view
modificationQ.What are the authorization objects which are always present in user
master record?Ans: For user master record as u must be knowing that different tabs of
UMR..So as per my understanding As UMR stores information of users...Like his name,
roles assigned to him, License data. Objects which are always present for UMR are:
S_USER_AGR, S_USER_GRP,S_USER_AUT,S_USER_PRO and each of this object has its own
importance... bcoz S_USER_AGR helps to maintain roles assigned, S_USER_GRP helps to
maintain Auth. group in Logon Data and S_USER_AUT AND S_USER_PRO helps to
maintain set of Auth. profiles and different Authorizations included in each
profile.Q.What is use of System Task Tab on menu bar in PFCG?Ans: Role creation,
change and delete.Q.How can we Lock transaction? What happens exactly?Ans: In
SM01 transaction we can lock the transactions; we can lock one or many at a time in the
system. After locking transactions, it won’t allow any body to use the transaction. (OR)
SM01 transaction can use to lock the transactions; we can lock one or many at a time in
the system. When a user starts a transaction, the system checks in table TSTC whether
the transaction code is valid and whether the system administrator has locked the
transaction.Q.What is Use of SM35P and SM35 is there any difference between
these two?Ans: Tcode SM35P use to display/monitor sessions. Using Tcode SM35 you
the run/process the sessions in background or foreground.Q.Is there any transaction
to see Transport Log.? Means, Which data or roles have been transported from
which system at what time?Ans: SE01 transaction is use to see Transport Log. By
clicking tab "DISPLAY" you can able to see the logs. You can also see the roles or data
has been transported from which system at what time.Q.Which role is commonly
used?Ans: Composite and single role commonly used.Q.How to find the already
locked users list before a particular date?Ans: Example: list of users already locked
before 01/01/2010 Goto SUIM - USERS - USERS BY COMPLEX SELECTION
CRITERIA,scroll down to the bottom, goto ADDTIONAL SELECTION CRITERIA, then give
the validity date and check the check box of the option LOCKED USERS ONLY, then
execute, u will get the list of the locked users.Q.What is the correct procedure for
Mass Generation of Roles ?Ans: 1)Tcode SPUC is for mass generation of roles. Or you
can use scripts 2)Program SAPPROFC_NEW inserted roles to be generated and execute.
3)PFCG > Utilities > Mass GenerationQ.Can we assign generated profiles to users
directly ?Ans: No, we can't assign a generated profile to user directly; we have to as the
role associated with that particular profile The best practice is not to assign profile to a
user master record. But then we can assign... Check it for example, assign sap_all to a
user master record and can actually work. So, yes a profile can be assigned to user and
can work.Q.How many maximum profiles we can assign to one user ?Ans: apprx
312Q.In which way we can assign single role to many users (more than 5000
users) ?Ans: Go to Su10 Click on authorization data Click on multiple selection button
beside user input field a pop up will appear-->click on green import from text file Give
the destination of the excel sheet where you have already kept 5000 users Execute--
>execute-->select all -->transfer this will bring all 5000 users in su10 Now change-->
role tab--> assign the single role-->saveQ.I want to see list of roles assigned to 10
different users. How do you do it ?Ans: 1.Go to SE16 Transaction 2.Type agr_users
and go to next screen 3.in the user’s field I have the list of user ids 4.Result (OR) GO to
suim -->ROLES-->By user assignment Click multiple selection Select user’s ans execute
Now you get a list roles assign to selected usersQ.What is the advantage of CUA from
a layman/manager point of view ?Ans: CUA - Central User Administration Advantage
of CUA is to lessen the time by creating users in one single system, and distribute it to
the respective systems (where the user id is requested)Helps in avoiding logging to
each individual systems. Layman point of view we don’t have any advantage, But SAP
security admin point it takes lesser time for user Admin.Q.how do we create firefigter
Id in VIRSAs VRAT ?Ans: First create service user and mapp this user in
/n/virsa/vFatQ.What is the procedure to delete a role ?Ans: First add the role that
need to be deleted in a Transport. Then delete it. If there is no transport already, then
create one for it and then add the role marked for deletion to it and then only we have
to delete the role. If the role is deleted without adding it to a transport then we will not
be able to delete the same role in other systems like Acceptance / Quality / Production
in CUA Environment.Q.What is the main difference between role and profile ?
Ans: Roles are the set of authorizations. Profiles are sub component of roles. We can
assign role to user but not profile. Roles are collection of different transactions,
reports/web links where its profile is nothing but set of authorizations which defines the
behavior of transactions listed in Role Menu. And another difference could be we
canassign roles to user using PFCG but we cannot assign manually created or generated
profile directly to users using PFCG.Q.How do I assign roles to a specific group, not
to a specific user, and apply the roles to all users in that group? This particular
group has four users?Ans: Go to suim,enter the user group name in user by complex
selection criteria, execute user's list,execute su10 enter list of user's and assign role to
themQ.What is fire fighter? When we are using fire fighter?Ans: Fire Fighter is used
if you have implemented Virsa/GRC Fire Fighter is Virsa tool, this used to execute critical
tcode when doing configuration Fire fighter is also a normal user ID but having some
specific access as per the needs. User type is kept as "service user' When it is used: Say,
in your project you are security administrator who Does not have access to direct SU01
but you needs the access urgently. Then FFID owner/administrator assigns you a FFID
for limited period so that you can perform the task from your login ID and pwd, using
tcode /n/virsa/vfat and login with that FFID. While logging you will be prompted to give
business reason for access. Everything you perform in that period gets recorded for
auditing.Q.What are the components in VIRSA tool and GRC?Ans: In GRC we have
these tools: Access Enforcer Complaince Caliber Role expert Fire Fighter In VERAS Tool
we have: VRAT and VFATQ.How to create new authorization object?Ans: Using SU21
we can create the New Authorization ObjectQ.Can anyone tell me what the use of
SU24 and SU25 transaction code is exactly?Ans: SU25: A transaction that copies SAP
defaults from USBOT & USOBX to USOBT_C and USOBX_C. USOBT is a table that
consists of transactions and authorization objects. It stores default values of
authorization from authorization objects. USOBX is a table that defines the necessary
authorization checks that needs to be performed within a transaction. Initially both
tables USOBT and USOBX consist of default values. These two tables are then used for
fill up of the customer tables USBOT_C and USOBT_X through the transaction SU25.
SU24: A transaction that maintains the assignment of authorization objects in the
customer tables USOBT_C and USOBX_C.Q.What is the difference b/w Copy Roles
and Derived Roles?Ans: In derived role, all the transactions of parent role r copied but
not the org structure and auth. and we can’t add more transactions in derived role. In
copy roles all the transactions with auth are copiedQ.What is temp role and copy role?
Ans: Temp role: - it is the sap standard role, which is defined by sap. Copy role: - copy
from an existing role is copy role.Q.What are various user types?Ans: Dialog (A)
System (B) Communication (C) Service (S) Reference (L) Dialog users are used for
individual user. Check for expired/initial passwords.Possible to change your own
password. Check for multiple dialog logon A Service user - Only user administrators can
change the password.No check for expired/initial passwords. Multiple logon permitted
System users are not capable of interaction and are used to perform certain system
activities, such as background processing, ALE, Workflow, and so on. A Reference user is,
like a System user, a general, non-personally related, user. Additional authorizations can
be assigned within the system using a reference user. A reference user for additional
rights can be assigned for every user in the Roles tab.Q.Describe how SAP handles
Memory Management?Ans: ST02 / ST03 In general via table buffers, you could go into
the whole Work Process, roll in, roll out, heap (private) memory, etc. however just as a
Unix or DBA admin would know, is you look this up when needed for the exact
specifics.Q.When we should use Transactional RFC ?Ans: A "transactional RFC" means,
that either both parties agree that the data was correctly transfered - or not. There is no
"half data transfer".Q.What is a developer key? and how to generate a developer
key?Ans: The developer key is a combination of you installation number, your license
key (that you get from http://service.sap.com/licensekey) and the user name. You need
this for each person that will make changes (Dictionary or programs) in the
system.Q.How should I set priority for Printing say like user, team lead, project
manager?Ans: There's nothing like "priority" settings for spool processes. Just define
more (profile parameter rdisp/wp_no_spool) processes so people don't need to
wait.Q.Why do you use DDIC user not SAP* for Support Packs and SPAM?Ans: Do
_NOT_ use neither DDIC nor SAP* for applying support packages. Copy DDIC to a
separate user and use that user to apply themQ.What is the use of profile paramater
ztta/roll_area?Ans: The value specifies the size of the roll area in bytes. The roll area is
one of several memory areas, which satisfies the user requests of user programs. For
technical reasons, however, the first 250 KB or so of a user context are always stored in
the roll area, further data - up to the roll area limit ztta/roll_first, - in the extended
memory, up to the limit ztta/roll_extension or if extended memory is exhausted, then -
again in the roll area, until the roll area is full, then - in the local process area, up to the
limit abap/heap_area_dia or abap/heap_area_total or until the address space or the
swap space is exhausted. Followed by termination with errors like
STORAGE_PARAMETERS_WRONG_SET an error code, that points to memory bottleneck
Minimum data transfer with context change; however, the increase helps to avoid
problems (address space, swap space, operating system paging).Q.What are the
various configuration methods available in STMS?Ans: 1. Single system
configuration
Q.What is a standard transport layer?Ans: This describes the transport route that the
data from the development systems follows.Q.What is SAP transport layer?Ans: It is a
predefined transport layer for DEV classes of SAP standard objectsQ.What are the
various qualifier option or what are the various import options?Ans: There are six
import options
SAP basis acts as an operating structure or a stage for SAP applications to run.
It supports the complete range of SAP applications.
OCM refers for online correction system; by using SPAM you can relate OCM
Patches.
Transactional RFC permits giving out of the sent request for a mistake in the
system, only once. This is done after allocating an ID for transaction procedure
which is also known as TID. It is dissimilar from asynchronous RFC only in this
feature. The accessibility of the remote system is not essential at the present
moment in the T RFC.
SAP system describes SAP singlet stack system. These can have two kinds of
runtime engine like JAVA or SAP NetWeaver as ABAP. An example Single Stack
System is SAP Enterprise Portal System. On the other hand, Single Stack
System is essentially SAP ERP.
SAP GUI is a custom tool which helps in accessing the central server and also
runs on different operating systems like UNIX, Microsoft Windows, and Mac etc.
SAP applications like the SAP Business Intelligence System and SAP ECC are
all managed by SAP GUI.
7. Is it possible to install SAP patches when other users are online?
When other users are online, we can’t fit SAP patches, as support manager will
not be able to inform and it will finish it. So it is always possible to better apply
hold packs when there is no user’s login into the system.
8. What is the procedure to disable import all option from STMS in SAP?
Go to STMS T-code
Go to menu option overview
Select System
Choose SAP System
Go to transport tool tab
Create parameter “No_Import_All” with the value set as 1
Save it
9. Mention the use of personalized tab and parameter tab in the user
master record?
Parameter Tab: It will allow admission to assign T-code on which one has to
work
Logon groups can be distinguished using the Tcode smlg in order to do that you
have to make the group and then allocate the instances for that exacting group.
To use the JAVA patches, SAP installer (SAPinst.exe) is in use. SDM and JSPM
are the newest versions of tools used to organize Java Patches.
Update
Background
Dialog
Enque
Spool
Server
Application Server takes the demand from the user and if the demand requires
data then it connects to the database server and gives the output.
Relocation
Customizing Request
Workbench Request
Transport of Copies
To view locked transactions, you require looking in the field CINFO, tabling
TSTC. Within SAP, you can use SE11 or SE16 to surf the table contents.
Confirm that you enter “A0” as the “HEX01 data constituent for SYST” starting
value and “A9” as the ending value.
Go to SM51, Click Release Notes. Entry equivalent to ICU Version will tell you
whether your scheme is ASCII or Unicode.
NO. SAP is not a database but it uses databases from other sellers like Oracle.
Although SAP has lately released its own database HANA
ST02 , RZ10
959789