topic Re: composite role generate in Application Development and Automation Discussions

composite role generate

Former Member — Sun, 18 May 2008 08:46:09 GMT

hi guys,

i had created some single roles(z:xxxxx) and assigned to one composite role z:basis_admin. then i assigned to one user. But it is saying that, some roles doen contain authorisation profiles.

Actually i copied standard role to my namespace and assigned to composite role. but i had not done the profile genration at single role level.

is there any procedure for doing composite role generation.

But i tried SUPC, PFCG_TIME_DEPENDENCY, it is not solved my problem

thanks for your answers

regards

Ramesh

Re: composite role generate

Former Member — Sun, 18 May 2008 11:06:49 GMT

Composite roles are just a combination of ur single roles which makes ur user assignment easier. they don't have profiles so there is no concept of generating them.

Use SUPC with 'roles with no profiles' to get the list of ungenerated single roles. and generate them.

Re: composite role generate

Former Member — Sun, 18 May 2008 20:53:16 GMT

My guess is the single roles which you copied are not generated as most of the SAP delivered roles intially are not generated...try generating these profiles if it helps you..

Thanks!

Re: composite role generate

Former Member — Mon, 19 May 2008 05:52:24 GMT

Hi Ramesh,

It may because of the standard role in which the Authorization / Profile may not me generated, so better copy the standard SAP role to a Zxxxx role (z role) and generate the authorization / profile, then copy the Zxxxx role to your desired composite role.

This is followed because we should not modify any standard SAP role as we already knew it..

I think This will workout for u in the composite role.

thank you.

<removed_by_moderator>

Edited by: Julius Bussche on May 19, 2008 11:22 PM

Re: composite role generate

Bernhard_SAP — Mon, 19 May 2008 06:33:09 GMT

Hi Kings,

I do not understand your reply. This is just a summary of the description of Ramesh and the reply of Anil...???? What am I missing?

thx, Bernhard

Re: composite role generate

jurjen_heeck — Mon, 19 May 2008 06:40:07 GMT

> What am I missing?

Probably the fact that some people give points even for duplicating answers. And if points mean the world to you it's well worth the try

Re: composite role generate

Former Member — Mon, 19 May 2008 06:42:23 GMT

hi Bernhard,

I was about to tell him that when a zrole has been created we have to activate it, as after copying the zrole from the standard role we have to activate it in the authorization , as for only the profile will will be generated for the copied Zxxxx role.. So only the profile might be missing.

So profile generation to be done for each and single role copied.

thank you...

if some thing extra must be done please let me know...

Re: composite role generate

Former Member — Mon, 19 May 2008 23:33:05 GMT

If you copy a standard single role, then you need to generate the profile and authorizations for it as well (as you would need to generate the standard role's as well). In both cases, the Zrole and the standard-role will have their own authorization values for those instances of the authorization objects in the role (menu).

The authorizations are independent of each other via their independent generated "auths" names.

For the user, specifically, if does however not matter which profile the authorization came from since release 6.10.

Please correct me if I am wrong, and check your facts before you post.

Cheers,

Julius