Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Value Role Concept

Former Member
0 Kudos

I tried searching for documents on Value Role concept. Please reply if anybody has any documents or links about this.

Thanks.

3 REPLIES 3

Former Member
0 Kudos

What is value role concept?

0 Kudos

There is not a lot of info in the public domain on the value role concepts. I know it has been covered on a couple of the other security forums.

Subbiah - generally the value role concept is where you split the functional and the data access. This is also referred to as the enabler concept.

You create 1 role with your transactions but don't populate org data for example

You then create another role with the auth objects that contain the org data

When you combine the two you get the access that is required. If you require lots of org data variants, you can have lots of org data value roles and assign as required.

There is no need to restrict it to org data either. Anything that needs differentiation can be catered for using the value concept. A example that is quite common is where a separate role is created for object F_BKPF_BUP which is then assigned as an extra value or enabler

Like any approach there are pro's and con's. Value roles take a while to set up. You need to manually import the relevant objects into the value role, and make sure the corresponding objects in the master role are deactivated or not populated etc.

It isn't a common approach so you need to ensure that your documentation is up to standard.