Roles

[Former Member]

Hi

We have 8 branches under the 1 company

We are creating the Customer Master Creation role, during the role created; we are advised to maintain the Organization level during the role created

1) Company Code

2) Division

3) Sales Organization (PLANT)

4) Distribution channel

If do I maintain the role with the Sales organization (Plant), it means we are maintaining the 8th role of the Customer Master Creation, Changes & display role also maintaining, total 24 role will be generated for the Customer Master Maintenance (Creation / Changes / Display ).

I want advise that; how will maintain one role for the Customer Master Maintenance to restrict users to their plant level?

Regards

Anwer Waseem

SAP BASIS

[Former Member]

Hi Anwer,

You will have to create Master/Derived role to enforce Organizational level values.

<u>Derived roles </u>

-Derived roles refer to roles that already exist. The derived roles inherit the menu structure and the functions included (transactions, reports, Web links, and so on) from the role referenced. A role can only inherit menus and functions if no transaction codes have been assigned to it before.

-The higher-level role passes on its authorizations to the derived role as default values which can be changed afterwards. Organizational level definitions are not passed on. They must be created anew in the inheriting role. User assignments are not passed on either.

-Derived roles are an elegant way of maintaining roles that do not differ in their functionality (identical menus and identical transactions) but have different characteristics with regard to the organizational level.

-The menus passed on cannot be changed in the derived roles. Menu maintenance takes place exclusively in the role that passes on its values. Any changes immediately affect all inheriting roles.

-You can remove the inheritance relationship, but afterwards the inheriting role is treated like any other normal role. Once a relationship is removed, it cannot be established again.

Hope it helps.

Please award points if it is useful.

Thanks & regards,

Santosh

[Former Member]

Santosh,

If do i change in the Master role where Organization level are different then the derived role, does organziation level update in the derived role or not ?

What will changes take affect in the derived role, please explain me.

REgards

Anwer

[Former Member]

Yeah it will..When you do a change in master role and if you distribute the changes to the child roles.

[Former Member]

Hi,

After doing the changes in master role, you will have do "Generate derived roles" which is in authorizations tab. This will immedeatly effect all the derived roles.

But if you want to change only certain derived roles, than you will have to do it individually in that perticular derived role.

Hope it helps.

Thanks & Regards,

Santosh