Double roles assignment and performance

[Former Member]

Dear all

Will there be any performance issues if we assign excatly the same roles (HR role with strucutral profile e.g. P_ORGINCON) twice for user in SU01?

-BT

[Former Member]

I am pretty sure that the number of roles, and therefore the number of profiles and hence number of authorizations (per object) which the user has can have an affect on performance of logon time and the authority-check, depending on which release you are on and how your system is setup.

What baffles me is why you would want to assign exactly the same role to the user twice?

Cheers,

Julius

[jurjen_heeck]

Even if the number of roles assigned would lead to performance issues (don't really know) it wouldn't matter wether they're different or identical.

[Former Member]

Hi did you mean it would affect the performance even the roles are identical? In such case like this, authorisation check is performed twice?

-BT

[jurjen_heeck]

Authorization check is done on all the users' profiles until there's a match. But I've never heard of performance problems caused by high numbers of role assigments.

[Former Member]

Hi,

It won’t affect the performance.When you assign a role to user authorizations are stored into the user buffers(su56).

when you are accessing the system it will brings the highest value of authorization from user buffers.

i hope it will help you.

kiran kumar.v

[Former Member]

I am pretty sure that the number of roles, and therefore the number of profiles and hence number of authorizations (per object) which the user has can have an affect on performance of logon time and the authority-check, depending on which release you are on and how your system is setup.

What baffles me is why you would want to assign exactly the same role to the user twice?

Cheers,

Julius

[Former Member]

Thanks everyone for your great answers on this one! Really appreciate alot!

.. and to Julius,

We accidently assigned the roles twice and there are now massive number of users who have many of such duplication. We thought of just to leave them like that and therefore the performance issue came to mind.

My next question most probably will be how to remove the double roles? I know there is a way via SU10, but that would only set the valitidy period but it doesn't remove the duplicated role completely away from the user's profile in SU01. Or is there a way to do this?

Best regards,

Beverly

[jurjen_heeck]

Have a look at (or search on) PRGN_COMPRESS_TIMES. That should help you.

[Former Member]

One remark on the issue of performance, when loading profiles SAP does a merge. It is known that this merge is not working verry good, but in this situation when roles are assigned double it works terrific. So it will never cause perfomance problems, it will not even make a difference!

[Former Member]

Thanks all for your time and great answers, I think I've got what I wanted.

Cheers!

[Former Member]

I understand that you have found your answer, but Auke's point is a good one:

Did you assign a composite role twice, or a single role twice, or two different composite roles which "contained" an identical single role each?

Cheers,

Julius

[Former Member]

Hi Julius

We assigned first the single role, then a composite role which consists of the same single role.

If I remove the single role via PRGN_COMPRESS_TIMES, it probably will not affect the composite assignment, or will it?

[Former Member]

Hi,

It won't effect.When you are deleting the single role means if the composi role also consist of same single role when you are deleting it will ask you.

the role is still contained in composit roles.if you continue,the system will delete the role from all composit role.

i hope it will help you.

kiran kumar.v

[Former Member]

i know this is solved and i am too late but still i want to add to the performance-issue.

if you have menues assigned in your roles, a double-assignment of the roles will also double the nodes stored in the user environment. please read note [203617|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=203617&nlang=EN&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede], [203994|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=203994&nlang=EN&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede] on the topic.

additionally have a look at [357693|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=357693&nlang=DE&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede]