P. 1
Practical Guide for SAP Security

Practical Guide for SAP Security

|Views: 1,199|Likes:
Published by ludens_kz

More info:

Published by: ludens_kz on Feb 17, 2012
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

07/19/2013

pdf

text

original

SAP® has integrated inheritance functionality into the profile generator.
That allows the creation of master roles and the derivation of corresponding
transaction and transaction related content to a number of derived roles that are
connected via a join in the inheritance field.

Exhibit 2.66: Transaction Inheritance

Everything that is part of the master role will be pushed to the connected derived
roles aside from the organizational value sets. Therefore this concept can be
applied to environments where the only difference related to role activities is in the
organizational area.
For example if the accountant A and accountant B have to perform identical tasks,
but with split responsibilities as for the company codes. A is only supposed to
work in company code 1000, B only in company code 2000.
You can now create a master role [single role], and inherit the content to two
derived roles [single roles]. The organizational values need to be specified
individually for any of the derived versions.
In case of future role changes, the changes only need to be executed in the

master, and can then be pushed to all connected derived versions

.

This of course reduces the maintenance effort.

Seite 53 von 171

Template Role

Master

Derived Role

Derived Role

Derived Role

Organizational Value
Set
I

Organizational Value
Set
II

Organizational Value
Set
III

Exhibit 2.67: Master – derived concept

The organizational values are listed in table USORG. The organizational fields in
the profile generator can be maintained with the help of the reports

PFCG_ORGFIELD_CREATE,

PFCG_ORGFIELD_DELETE

and

PFCG_ORGFIELD_UPGRADE.

The view Inheritance Hierarchy in PFCG provides a good overview of master
roles and their derived versions.

Seite 54 von 171

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->