topic Maintain Organization Level in Application Development and Automation Discussions

Maintain Organization Level

Former Member — Thu, 30 Aug 2007 20:49:41 GMT

We have created Z roles from SAP delivered roles.We have grouped these singles roles into composite roles based on the different Business Functions.We modified activities for every single roles based on the Business Function and set company codes to * for corporate level.

We then duplicated each composite role (including the single roles) for every area (e.g : ZCOMPOSITE_FI_TEST to ZCOMPOSITE_FI_TEST_GA ) We changed the names of single roles when copying

We tried to change the company code value in ZCOMPOSITE_PM_TEST_GA by clicking the org level button. When trying to save it, it does not save. It still shows *

In short, we are trying to change the company code values in the copied singles roles which are in the composite roles. But when we save, it still shows the original value of *

Any comment?

Message was edited by:

Jackofalltrades

Re: Maintain Organization Level

Former Member — Fri, 31 Aug 2007 05:15:33 GMT

Did you use the Orglevel pop up or did you try to change this on field level?

Re: Maintain Organization Level

dhorions — Fri, 31 Aug 2007 06:32:19 GMT

There is also an 'Organizational levels...' button in de authorisation profile screen in PFCG, you should use that to change org. levels. (or the popup) .

Also : here's a tutorial, it's pretty basic, but it might help : http://www.sapsecurityonline.com/tutorials/create_derived_role.htm

Re: Maintain Organization Level

Former Member — Fri, 31 Aug 2007 16:06:00 GMT

I know about the derived role concept and how to make changes

What am I asking is I have copied the SAP standard roles and then created Z roles. Then grouped those single roles into composite roles. Then while copying those roles we changed the name ( Z roles) and then changed single roles according to the jurisdiction.

When I want to maintain the Org levels by clicking the Org level button on the top, it should change the company code in a role. As I said instead of * I want to give specific company code. I do that and try to save, it does not save, it still shows the *

Re: Maintain Organization Level

Former Member — Mon, 03 Sep 2007 01:21:45 GMT

This is how I look at it.A composite role is just a container. From what I know to change the org level of the composite role you would need to set the Org level ofthe single role. Instead of copying composite roles to different locations you could try this.

1. Create Parent roles (Single roles)

2. In the parent set Organizational level. Set the same to $ (Giving * would mean giving full access if the parent is accidentally assigned to the user)

3. Create derived roles based on location (Eg: GA). Set the org levels here.

4. Group derived roles into composite role's and assign it to the user in the respective locations.

best regards

Ravi

Re: Maintain Organization Level

Former Member — Mon, 03 Sep 2007 06:50:20 GMT

One way to get Org levels in line again:

go to the orglevel field in each object in every single role push the Delete value button (waste bin) in front of the field (the star will disappear) and only after doing this go to the Org level Pop up window and assign the right value. Now that value should appear in each org level field.

reason: in the original role you used to copy the roles from the value was NOT entered via the pop up but directly in each field, only by deleting that value you will get teh connecting to teh pop up restored.

One way to speed things up:

1 delete all derived roles,

2 do the above steps for the basis (template) roles,

3 recreate the derived roles

this can all be done via catt.

4 assign the right values to each derived role.