Shell Role Concept

[Former Member]

Hello All,

Any one can explain me concept of shell role, what is use, advantages, disadvantages how to maintain shell roles.

thanks

Sushant

[Former Member]

Hi Sushant,

Please elaborate on what you mean by "Shell roles". As often happens with non-SAP terminology, it can mean a few things.

[Former Member]

Hi Alex,

a bit info which i had was, for example if u create a role in the HR but the user can get access for BI system, and we can maintained this role in the HR system only,

Thanks

Sushant

[Former Member]

Hi Sushant,

It sounds like you are talking about cross-system composite roles.

What is use

If you are using CUA you can define roles in your CUA master that contain roles for the target systems too. That way if you have HR as your CUA master (possibly using org assignments too?), you can provision for all relevant systems based on the role definition.

Advantages

Can speed up provisioning into multiple system

Helps support accurate job definitions for all system access

Disadvantages

CUA needs to be setup and maintained properly (not sure if that is a disadvantage but is a factor for consideration)

If enough thought does not go into design then you end up with composites/shells that cover lots of eventualities

If you have a granular single-role concept then your shell role could get very cluttered by the number of assignments required.

Maintain

Use PFCG in the CUA master

Like any other composite role - use text comparisons etc to pull in the roles from the target systems