Structural Security - Generic Roles and OOSB for P_ORGINCON

[Former Member]

Hi,

I'm trying to assign a generic role for all users in our SAP system.

I'm trying to do this using structural security by assigning this at the top level organizational unit.

Using PP01, I assign an relationship to the Org Unit with the following:

Relationship type/relationship B 007 Is described by

Type of related object

ID of related object Z:GENERIC

Abbreviation Z:GENERIC

Name Generic Profile for ALL users - Z:GENERI

After I run, RHPROFL0 the generic role is still not assigned.

I appreciate any suggestions to correct this.

Also, I notice that when I assign a structural profile to P_ORGINCON and run RHPROFL0. The users are not assigned to OOSB. When I use P_ORGIN and assign this to a PD_Profile it does appear. Under OOAC the following is set:

AUTSW ADAYS 5 HR: Tolerance Time for Authorization Check

AUTSW APPRO 0 HR: Test Procedures

AUTSW DFCON 1 HR: Default Position (Context)

AUTSW INCON 1 HR: Master Data (Context)

AUTSW NNCON 0 HR:Customer-Specific Authorization Check (Context)

AUTSW NNNNN 0 HR: Customer-Specific Authorization Check

AUTSW ORGIN 0 HR: Master Data

AUTSW ORGPD 1 HR: Structural Authorization Check

AUTSW ORGXX 0 HR: Master Data - Extended Check

AUTSW PERNR 1 HR: Master Data - Personnel Number Check

AUTSW XXCON 0 HR: Master Data - Enhanced Check (Context)

Is there anything else that needs to be done for P_ORGINCON for this to work?

Thanks for your help

[Former Member]

Hi,

Are you trying to assing role to a position ?

regards,

Zaheer

[Former Member]

No, I am trying to assign the role to an Organizational Unit.

Is this possible? or can it only be assigned against positions?

[Former Member]

Hi Kate,

It is possible to assign roles to Org units also. I remember using PO10 to make this sort of assignment.

Could you run PFUD and check if the users get assigned the roles instead of rhproflo?

[Former Member]

Kate,

What you are doing is correct, you can use PP01 & also P010. I prefer the later because I know it is related to org units :).

PP01 -> Choose object type:Org unit, Object ID: enter your ROOT id.

On Active tab:

Select relationships -> choose create.

Relationship type/relationship = B/007

Type of related object: Role

ID of related object : Enter the desired generic role name

save relationship.

goto -> PFCG and do a user compare. All the users should show up in the user assignments.

OOSB may not be that helpful if you have activated context sensitive object. One of the probable reasons you do not see the profiles in OOSB or T77UA is because PD profiles are not getting directly assigned to positions. I have found report RHUSERRELATIONS to be helpful in such situations.

Check Dimitri's post here about activating P_ORGINCON and OOSB.

Good luck!