topic Re: Role maintenance in Application Development and Automation Discussions

Role maintenance

Former Member — Wed, 11 Jun 2008 08:51:06 GMT

Hi Experts,

I have created role "ztest" and coppied SAP menu MM in it.

now

i have two user

manager and data entry operator

I want manager to use all Tcode in it

but for data entry operator only create entries and display.

How to do tht ?

Many Thanks in advance

Mani

Re: Role maintenance

fredrik_borlie — Wed, 11 Jun 2008 09:11:36 GMT

I am afraid there is no easy work behind roles.

You have to create two different roles.

One with display access (oftenly activity 03) and one with change access (activity 02).

Then you also have to figure out how to manage create, delete, inactivate etc.

You can also create them as separate functions and by combining them you can achieve the desired functions.

But to be honest. I would recommend to take the ADM940 training from SAP cause there are so many things to know when working with roles and authorizations!

Regards

Fredrik

Re: Role maintenance

Former Member — Wed, 11 Jun 2008 09:51:14 GMT

Hi,

As fedrik told ..

create a 2 roles with different naming convention..

1, in the manager role maintain all activity.(create change display delete....)

2. in the data entry role maintain only create and display. activity

I think this will help u .....

Regards

Gangadhar

Re: Role maintenance

Former Member — Wed, 11 Jun 2008 10:04:15 GMT

So you mean so say one role can't be assigned to diffrent users with diffrent authorization ???

If yes, shall I consider making derived roles ??

Regards

Mani

Re: Role maintenance

Former Member — Wed, 11 Jun 2008 10:18:04 GMT

Derived roles, as far as I understand them, will be no big help as you only distinguish by organizational values like company codes in them. Authorizations like Tcodes and activities will remain unchanged by default.

Kind regards,

Richard

Re: Role maintenance

Former Member — Wed, 11 Jun 2008 10:48:17 GMT

Richard is correct, derived roles will not help.

Create a role for each set of transactional access. If you want to further restrict these transactional roles by organisational data then you can create derived roles to save you time.

Re: Role maintenance

Former Member — Wed, 11 Jun 2008 11:38:37 GMT

Hi..

Even you can create a role with all the required t-codes and activity..and you can copy the same role to other..

By default all the t-codes and activity will be copied.

in the copied role you can change the activity with your requirements.

1. create a role for manager(ex: z:mm__manager)

in pfcg copy to new role (ex: z:MM_dataentry)

then go the z:mm_dataentry role..

change the activity like create(activity-01) and display(activity-03)only.

Hope this will resolve your requirements

Cheers

Gangadhar

Edited by: gangadhar hm on Jun 11, 2008 5:09 PM

Re: Role maintenance

Former Member — Thu, 12 Jun 2008 04:53:40 GMT

Many thanks to ALL.

I made derived roles for same deparment users and separate role for others.

Thanks once again.

God bless you all