SU24 vs PFCG

[Former Member]

SU24 vs PFCG

Hi experts,
I have three questions to Tr-Cd SU24.

1. What is the difference between SU24 and PFCG?
2. What can we do with SU24?
3. Could you explain what "Authorization Default Values" are?

I hope somebody will help me because I'm new to SAP.
Thank you.

Taichiro

[chris_wake]

Please look at ADM940 that will answer your questions.

[Former Member]

Sorry for the late reply. I appreciate your answer!

[kaus19d]

Hi,

The role of SU24 is a bit big to explain here. PFCG is for creating various roles & maintaining roles, like customised Z or Y roles, also for assigning to user & Role generation. Possibly for starting, the below links can give you some more details & idea on those Security Topics,

https://answers.sap.com/questions/4944227/to-use-su24-or-to-not-use-su24-that-is-the-questio.html

https://help.sap.com/doc/saphelp_nw73/7.3.16/en-US/f7/d122a06a95448d9053e933354bd809/content.htm?no_...

https://blogs.sap.com/2016/08/24/what-is-authorization-and-how-to-use-authorization-properly/

Thanks,

Kaushik

[Former Member]

I really apologize for the late reply. Thank you for your answer!

[former_member653265]

SU24 provides the transaction versus corresponding authorization objects(along with fields) to be checked when assigned to the role(USOBT_C and USOBX_T information). The values defined in su24 are pulled when the roles are generated by considering it as by default. You can change the values in the given field if required.

SU24 is for the information on what objects, fields, and field values are checked while designing a role. Also if required the objects, fields and field values can be added to make the transaction authorizations as default.

PFCG: This transaction allows us to create a role (single, composite, derived, etc). It contains transactions, services, objects, etc. When generated, it creates a profile. These generated roles when assigned to the user, the user will be able to execute the transactions as per the business needs.