Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Double roles assignment and performance

Former Member
0 Kudos

Dear all

Will there be any performance issues if we assign excatly the same roles (HR role with strucutral profile e.g. P_ORGINCON) twice for user in SU01?

-BT

1 ACCEPTED SOLUTION

jurjen_heeck
Active Contributor
0 Kudos

Even if the number of roles assigned would lead to performance issues (don't really know) it wouldn't matter wether they're different or identical.

13 REPLIES 13

jurjen_heeck
Active Contributor
0 Kudos

Even if the number of roles assigned would lead to performance issues (don't really know) it wouldn't matter wether they're different or identical.

0 Kudos

Hi did you mean it would affect the performance even the roles are identical? In such case like this, authorisation check is performed twice?

-BT

0 Kudos

Authorization check is done on all the users' profiles until there's a match. But I've never heard of performance problems caused by high numbers of role assigments.

0 Kudos

Hi,

It won’t affect the performance.When you assign a role to user authorizations are stored into the user buffers(su56).

when you are accessing the system it will brings the highest value of authorization from user buffers.

i hope it will help you.

kiran kumar.v

0 Kudos

I am pretty sure that the number of roles, and therefore the number of profiles and hence number of authorizations (per object) which the user has can have an affect on performance of logon time and the authority-check, depending on which release you are on and how your system is setup.

What baffles me is why you would want to assign exactly the same role to the user twice?

Cheers,

Julius

0 Kudos

Thanks everyone for your great answers on this one! Really appreciate alot!

.. and to Julius,

We accidently assigned the roles twice and there are now massive number of users who have many of such duplication. We thought of just to leave them like that and therefore the performance issue came to mind.

My next question most probably will be how to remove the double roles? I know there is a way via SU10, but that would only set the valitidy period but it doesn't remove the duplicated role completely away from the user's profile in SU01. Or is there a way to do this?

Best regards,

Beverly

0 Kudos

Have a look at (or search on) PRGN_COMPRESS_TIMES. That should help you.

0 Kudos

One remark on the issue of performance, when loading profiles SAP does a merge. It is known that this merge is not working verry good, but in this situation when roles are assigned double it works terrific. So it will never cause perfomance problems, it will not even make a difference!

0 Kudos

Thanks all for your time and great answers, I think I've got what I wanted.

Cheers!

0 Kudos

I understand that you have found your answer, but Auke's point is a good one:

Did you assign a composite role twice, or a single role twice, or two different composite roles which "contained" an identical single role each?

Cheers,

Julius

0 Kudos

Hi Julius

We assigned first the single role, then a composite role which consists of the same single role.

If I remove the single role via PRGN_COMPRESS_TIMES, it probably will not affect the composite assignment, or will it?

0 Kudos

Hi,

It won't effect.When you are deleting the single role means if the composi role also consist of same single role when you are deleting it will ask you.

the role is still contained in composit roles.if you continue,the system will delete the role from all composit role.

i hope it will help you.

kiran kumar.v

Former Member
0 Kudos

i know this is solved and i am too late but still i want to add to the performance-issue.

if you have menues assigned in your roles, a double-assignment of the roles will also double the nodes stored in the user environment. please read note [203617|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=203617&nlang=EN&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede], [203994|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=203994&nlang=EN&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede] on the topic.

additionally have a look at [357693|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=357693&nlang=DE&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede]