Role Authorization Profile Search

[Former Member]

All,

We are trying to identify all the derived/single roles that are not generated without going into each individual role and looking. Is there a serch or query that allows us to identify what roles are not generated?

Also, with these roles we have identified a couple derived roles that were not generated and where the others derived roles related to these roles were generated. What is the best way to move these up? Should we just identify which roles were not generated correctly and put them in a mass transport?

Any suggestions and/or ideas are appreciated.

Thanks,

-Daniel

[former_member275658]

Go to tcode SUPC, it will give you a list of roles which need to be generated.

After this you need to adjust the derived roles. if you have plently of derived roles to be generated. Create a catt script for adjusting derived roles.

Once evrything is green, select all the roles and mass transport thru PFCG.

Thanks,

Masood

[Former Member]

Dear All,

You can use the PFCG and from the menu use the mass gerneration with the selection of the Z for Y * role name and you will get the roles which is not generated then select all the record and generate it.

Best Regards

Vikas

[Former Member]

Daniel,

run TX SE38...enter the program name... RSUSR020 -> and click on the activate tab to activate the report.

or

SUPC will give you a list but you don't have to generate them at the same time., but I think there is an option to automatically generate profiles after the selection just make sure that the box isn't checked

After this you can go head with mass transport / one at a time.

Thanks,

Sri