Role Methodology Access Restriction

[#1]

Hi,

We are implementing BRM for a client. And the client wants to divide the role methodology authorizations among 3 set of admins. Meaning the

• First set of admins can only Define Role, Maintain Authorizations and Derive Roles.
• Second set of users can do Risk Analysis and assign Mitigation controls, Attach Test Cases and Initiate Approval and the
• Third set of admins can do Role Generation.

How do we achieve this? Can we restrict the above set of users to see only those Tabs(see below screen) which suit their Job?

Regards,

Mohamed Fazil

[Former Member]

Hi Mohamed,

Administrators can take action , as per authorizations assigned to them. So, i think there is no substantial meaning of dividing role methodologies as per Admin.

Normally, methodology is divided as per type of roles(eg. single, composite) or System or Landscape, and not on Definition/Risk Analysis/Role generation because every role has to go through all the steps.i.e a role which is defined, will go through Risk Analysis and then generation.

Regards

Plaban

[Colleen]

Hi Plaban

Large SAP sites with regional and country specific teams would have a requirement to split the different methodology steps between different members. Also, some might have the role definition and testing sit with Functional whilst the Authorisations sit with security. Some have role derivation and org value updates sit with one team whilst the rest sit with another.

This all comes back to business process for role management design. Splitting between role types is more common.

Regards

Colleen