Role administration

Roles contains the authorizations that users can use to access the transactions, reports, Web-based applications, and so on that are contained in the menu.

Basic understanding of roles 

1. Single role
2. Composite role
3. Master - derived role
4. Enabler role

Single role - Single roles contain Tcodes,authorization fields and organizational values. These roles are build referring to a job/position based.

Composite role - defined as a group of single roles. We can indirectly assign multiple roles to a user.It is used based on a functional or business group.

Master-derived role - It defines the parent- child relationship where the derived roles have all the authorizations of the master role. Master derived roles are differentiated based on the organization values assigned to the derived roles where in for master role we cannot assign. 

Enabler role - These roles provide the missing organizational values from the functional role that have all the functional authorizations  except the organizational values.So to successfully execute a Tcode we need enabler roles.

Comments Comments