topic Re: Master role set up in Application Development and Automation Discussions

Master role set up

Tiberius — Mon, 16 Nov 2015 23:43:07 GMT

We are trying to set up master roles as well as derived roles off the master ones to give access only to certain company codes.

Currently we are using a range of companies in the master role (i.e. AB01 - AB99) and we are only using 10 companies of the possible 99.

Would there any issues if we set up the company as " * " (asterisk) in the master role rather than AB01 - AB99 ? Does anyone foresee any risks associated to using asterisk instead of a wider range ?

Thanks.

Re: Master role set up

Former Member — Tue, 17 Nov 2015 09:50:20 GMT

Hi Tiberius,

You can keep this field as BLANK in master

Peeyush

Re: Master role set up

abhishek_sehgal — Tue, 17 Nov 2015 10:21:41 GMT

Always Keep Org Data blank in Master role, you can fill * in derived role but challenge will be that all Company Code will be included and you have to reomoved other 89 afterwards, which are not required for that user ids.

I would advice to include on required Company Codes in Org level of derived role

Re: Master role set up

Former Member — Tue, 17 Nov 2015 14:06:15 GMT

What abishek wrote! Never include organisation levels in a master, if you aren't sure that this will stay identical over the whole life cycle of the business process. Hint: it won't. The less you doctor with the master, the more grateful you will be in 10 years time. Just sayin'.
Never put the name of company codes (or any other Level) into the name of your roles - again, it isn't likely that the relation of company codes to plants to other-org-Levels will be the same for every plant, let alone every company code. Your business might grow "organically" and the more chaotic organic the less you serve transparency by including one organisation Level to the name. Think of another nomenclature instead.