Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Deriving from composite roles

Former Member
0 Kudos

Hi, Experts,

Can I create a role deriving from a composite role? Or can I derive from several single roles and then modify its orgnisation structure?

Thanks

2 REPLIES 2

Former Member
0 Kudos

Hi,

"can I derive from several single roles and then modify its orgnisation structure?"

Yes-You need to implement the Derived Roles Concept:

<b>Derived roles</b>

- Derived roles refer to roles that already exist. The derived roles inherit the menu structure and the functions included (transactions, reports, Web links, and so on) from the role referenced. A role can only inherit menus and functions if no transaction codes have been assigned to it before.

- The higher-level role passes on its authorizations to the derived role as default values which can be changed afterwards. Organizational level definitions are not passed on. They must be created anew in the inheriting role. User assignments are not passed on either.

- Derived roles are an elegant way of maintaining roles that do not differ in their functionality (identical menus and identical transactions) but have different characteristics with regard to the organizational level.

- The menus passed on cannot be changed in the derived roles. Menu maintenance takes place exclusively in the role that passes on its values. Any changes immediately affect all inheriting roles.

- You can remove the inheritance relationship, but afterwards the inheriting role is treated like any other normal role. Once a relationship is removed, it cannot be established again.

Note: Composite role is a collection of single roles. It is not possile to derive a role from a composite role.

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

Santosh

Former Member
0 Kudos

Hello,

you cannot derive from a composite role simply because it cannot be an original role.Composite roles do not themselves contain authorization data,Users who are assigned a composite role are automatically assigned the associated single roles during the compare

For more information regarding derived roles: http://help.sap.com/saphelp_46c/helpdata/en/1c/c38028816c11d396bc0000e82de14a/content.htm

Award points if helpful,

Regards,

Raju.