Role maintenance

[Former Member]

Hi Experts,

I have created role "ztest" and coppied SAP menu MM in it.

now

i have two user

manager and data entry operator

I want manager to use all Tcode in it

but for data entry operator only create entries and display.

How to do tht ?

Many Thanks in advance

Mani

[fredrik_borlie]

I am afraid there is no easy work behind roles.

You have to create two different roles.

One with display access (oftenly activity 03) and one with change access (activity 02).

Then you also have to figure out how to manage create, delete, inactivate etc.

You can also create them as separate functions and by combining them you can achieve the desired functions.

But to be honest. I would recommend to take the ADM940 training from SAP cause there are so many things to know when working with roles and authorizations!

Regards

Fredrik

[Former Member]

Hi,

As fedrik told ..

create a 2 roles with different naming convention..

1, in the manager role maintain all activity.(create change display delete....)

2. in the data entry role maintain only create and display. activity

I think this will help u .....

Regards

Gangadhar

[Former Member]

So you mean so say one role can't be assigned to diffrent users with diffrent authorization ???

If yes, shall I consider making derived roles ??

Regards

Mani

[Former Member]

Richard is correct, derived roles will not help.

Create a role for each set of transactional access. If you want to further restrict these transactional roles by organisational data then you can create derived roles to save you time.

[Former Member]

Hi..

Even you can create a role with all the required t-codes and activity..and you can copy the same role to other..

By default all the t-codes and activity will be copied.

in the copied role you can change the activity with your requirements.

1. create a role for manager(ex: z:mm__manager)

in pfcg copy to new role (ex: z:MM_dataentry)

then go the z:mm_dataentry role..

change the activity like create(activity-01) and display(activity-03)only.

Hope this will resolve your requirements

Cheers

Gangadhar

Edited by: gangadhar hm on Jun 11, 2008 5:09 PM

[Former Member]

Derived roles, as far as I understand them, will be no big help as you only distinguish by organizational values like company codes in them. Authorizations like Tcodes and activities will remain unchanged by default.

Kind regards,

Richard

[Former Member]

Many thanks to ALL.

I made derived roles for same deparment users and separate role for others.

Thanks once again.

God bless you all