Add 1 transaction to multiple roles

[Former Member]

Hi There,

I am responsible for the authorization of the sap customers for my company.

We have multiple roles for multiple company's within our own company.

Butt when i must add one transaction to the role admin, i must ad the transaction for al the roles of the different company's. admin company 1, admin company 2, and so on.

Is there an transaction i can do mass change's for multiple role's.

[Former Member]

Hello,

if I understood you right, you have several admin roles that are just different in some orgnizational values, but the base functionality of each admin role is the same. If that is correct, best practice is to use derived roles. In that case you just build one role and derive the other roles from that master role. In the derived roles you than only have to set the organizational values.

Starting from that point you just have to add a additional transaction to your master role and generate the derived roles to have the new transaction in the derived roles.

So, may be you have to think over you authorization concept in general?

[Former Member]

Hi,

There is a another way also, it could be done.

Create One common Role - <b>zrole_common</b>

This should be added to all admins of all companies

Create seperate Role for each company ( excluding auth in common role).

<b>zrole_company1</b>

<b>zrole_company2</b> etc.

Now assign <b>zrole_common</b> and <b>zrole_company1</b> to <b>company-1 admin</b>.

Now whenever, you wanted to add any common auth obj, add it to zrole_common and regenerate it, This will be effected to all admins.

I am not sure, how your Roles are maintained now. But if possible, go for this proven way.

Thanks,

Raj Sam

[Former Member]

Thnx guys for you'r quick response.

@Raj

I have several admin roles that are just different in some orgnizational values.

Each admin role contains different company code's, controlling area, and profit centers.

If i use a common Role i cant use different company code's, controlling area, and profitcenters.

@Michael

Can you give me a link, where i can read more about you'r solution.

[Former Member]

Hi,

for creating and maintaining derived roles, check

<a href="http://help.sap.com/saphelp_46c/helpdata/en/1c/c38028816c11d396bc0000e82de14a/frameset.htm">http://help.sap.com/saphelp_46c/helpdata/en/1c/c38028816c11d396bc0000e82de14a/frameset.htm</a>

Also, if one of your colleagues attended SAP course ADM940, ask him for the course materials.

Regards,

Dominik

[Former Member]

Hi Wilkes,

create a role with like Z_general applicable for all companies

and assign to all users.

Z_general - shall have SU53 (which is helpful) and also the transaction

which should be available company wide.

regrds / Jayaraman Krishnamurty

Intelligroup.