SAP BASIS AND SECURITY TUTORIAL

 How To Create Derived Roles in SAP We have seen how to  create Single roles , Composite roles  and assigning the roles to  user master  records. In this blog we will see how to create derived roles and assigning these roles to users in SAP.  Difference in the derived roles and deriving roles are the organizational values. The menus and authorizations are same in both the roles. The relation is also called as parent child relationship or master role and derived role. Derived roles are useful when the organization has spread across the globe. System Administrators can create one master role and can derive several roles based on the company codes. Procedure for creating Derived Roles: 1. Go to SAP menu-->Administration-->User Maintenance-->Role Maintenance or execute transaction code PFCG Enter the derived role name and click on create single role tab. 2. Provide short description and long text like manager approvals and ticket number. 3. Enter ...

  How To Create Composite Roles In SAP We have seen how to create single roles and assigning the roles to user master records. In this blog we will see how to create composite roles and assigning these roles to users in SAP. Composite roles consists of single roles. One composite role can have multiple single roles. When the composite roles are assigned to users, the single roles with in the composite role gets assigned to user automatically. Composite roles do not contain any authorization data. All the authorizations comes from the single roles. Composite roles are useful when the user requires authorizations for multiple roles. We can assign one composite role instead of assigning multiple single roles. Composite roles can not be included in another composite role. Procedure for creating Composite roles: 1. Go to SAP menu-->Administration-->User Maintenance-->Role Maintenance or execute transaction code PFCG SAP System do not recognize the single role and composite ro...