Change account in business role scenario

[mamoonr]

Hi Experts,

Is change account request type is justified where business role concept is used ?

If Business roles are perfectly defined  for each specific job then change account is

not required.What if some users of same job/position and not all need some extra access.

My query is What is SAP best practice or recommendation in this case.

Thanks,

Mamoon

[Former Member · Accepted solution]

Mamoon,

Business Roles can be seen as "super composite" roles, i.e. beyond system restriction, but fundamentally it is still a bunch of roles blocked together. Some users may require more than one job position in some environments, may it be temporary or permanent, therefore a "Change" request is valid.

Someone may move jobs, therefore a "Change" request is required to remove the old access and assign the new access, may it be single roles or business roles.

"Change" requests give greater flexibility in managing user's authorisations.

[former_member225453]

Hi Mamoon,

Change Request is definately justified in case of Business roles. Lets suppose, if there is a single role which is added or modified in an existing Business role which is already provisioned, in this case, this business role will be again set for provisioning because the user who got this role assigned will be impacted with the new addition or the modification done.

The update is done by 'Update assignement' and a job is triggered internally which results in the final
update to the business role and it is then provisioned again to the User in the Target system.

Therefore, change request definately required.

Hope this clears your doubt!

Best Regards,

Shreya Gupta