Master - Derived roles -- some generated some ungenerated.

[Former Member]

All,

We know how to solve this issue but we would like to know what causes it and how to prevent it in future development. Example: We have roles that have been created from one master role. There are probably 80-90 derived roles from this one master role all with a small variation of company code and release code. These roles have been implemented for over a year or more and nothing has been added to the master role to be pushed down. The only change has been an derived roles added with new company code/release code. When these roles are created the master roles gets generated and then pushed down through all the derived roles once the specific authorizations are added. I development is shows that everything is in sync and is all green. In quality and production it willl show that for each company code release code 01-06 are green, 07-10 are red and 11-15 are green. Its always the same release codes for each company code that show are ungenerated.

This is just one example we have other roles that have been created and at GOLIVE (3 years ago) and the newly created derived roles is green where as certain older ones are not. We thought it had to do with the generation of new roles but I just created a new company code from the example above and it is the same way.

Is there a certain procedure that makes this happen, or is there a way to prevent this? Also, with this in production and not being able to generate these roles in production is it hurting or will it affect anything within the roles transactions if there are authorizations in the role, and a profile assigned to the role for a generated authorization but the authorization stop light shows red will this affect anything?

Any help or ideas are greatly appreciated.

Thanks,

-Daniel

[Former Member]

Daniel,

we need to analyze from different angles like:

1.Have u generated roles in DEV system ?? Hope no organisational values are missing in authorizations tab.

you need to mass generate the profiles! (SUPC)

2. When creating the transport the person might have forgot to unchecked to transport the profiles as well.

3.. some changes were made to the roles after the transport was created.

Plz Refer to SAP Note 571276 and the following link:

4. If any system upgrades might have change the auth tab to red. (but in your case it with org levels)

5. These type of mistakes happen if any new person have joined & without proper reading company documentation, might have the changed the roles.

6 Finally, check whether company code & release code exist in QA & PRD.

Thanks,

Sri