Role precedents

[Former Member]

Hi,

If i assign 2 roles to a user id in which in the first role the t.code fb03 is disabled and in the second role the same t.code fb03 is enabled, then which role will take precedent?

can the user id access fb03 or not?

[Former Member]

Hi,

If i assign 2 roles to a user id in which in the first role the t.code fb03 is disabled and in the second role the same t.code fb03 is enabled, then which role will take precedent?

can the user id access fb03 or not?

[Former Member]

Of course the user can access FB03 as long as the roles are in validity date, But I still dont get what u mean by disabling a Tcode?

you either delete a tcode from a role or disable S_TCODE (only if it is manually added).

[Former Member]

It actually goes back to the Authorization concept, the user buffer contains all the authorization objects assigned to user via different profiles ( of different roles). So there is no sequencing or preferance or *Role precedents * of auth check for the S_TCODE in the scenario.

By the way, did you tried it in the SAP System ?

Create a test ID with these roles and login using this test ID and see if you can run the tcode or not

then check the User buufer for your test ID using SU56

Cheers !!

Zaheer

[Former Member]

> By the way, did you tried it in the SAP System ?

For a brief moment I thought the same, but obviously the answer is "no"... and hopefully we will not have to see such questions again from Raj.

@ Raj: Please also follow-up on your other "unresolved" questions.

[Former Member]

Raja-

Yes. User can access fb03 even if there is multiple roles entry in UMR.

Cheers!

Ashok