topic Re: How to avoid create many roles in Application Development and Automation Discussions

How to avoid create many roles

Former Member — Fri, 08 May 2009 11:37:08 GMT

Hello!

I have an issue on how to create roles.

I have 300 shops and each user will be authorised (by document type in Purchase Requisition)

to make requisitions only for his shop.

Can i somehow use the authorization object for PR and not create 300 roles( one per shop?)

Is there a way to add an auth object value to user profile?

Thank you!

Re: How to avoid create many roles

sdipanjan — Fri, 08 May 2009 12:56:07 GMT

Hi,

As per the given information, it seems there will be 300 employees for this work!!!!!

Please let me know if Yes, else let me know how many employees are going to work their.

Regards,

Dipanjan

Re: How to avoid create many roles

Former Member — Fri, 08 May 2009 13:21:47 GMT

If you can build one role for the task in the shop and are sure that the roles will be identical accross all the shops, then Derived Roles is an option if you can find an object which is consistently used by the transaction(s) and differentiates for an organizational field which relates to your 300 shops.

Cheers,

Julius

Re: How to avoid create many roles

Former Member — Fri, 08 May 2009 20:19:41 GMT

bowing to julius.

try to determine whether you could use purchasing groups as an organizational distinction for the different shops. i strongly recommend that. then proceed as julius adviced and create derived roles, where the only diffrerence might be the purchasing group.

Re: How to avoid create many roles

sdipanjan — Fri, 08 May 2009 21:15:46 GMT

Hi,

As a SAP default field, Doc. Type should not be changed to Org. level. And if you are not hiring 300 people to maintain each document type separately (which is itself a foolish idea) please put more concentration to segregate user access by "Purchasing Group", "Purchasing Organization".

1. create roles for different "Purchasing Group", "Purchasing Organization" first. (say 10 roles)

2. for each set of those 10 roles, you just clone them for different doc types (as far as required).

1 role for each doc. type: this level is granularity is not so important from risk point of view.

Regards,

Dipanjan

Re: How to avoid create many roles

Former Member — Fri, 22 May 2009 07:29:18 GMT