Question:
We are assigning Roles to positions in our HR ECC6.0 system. In testing, when I go through PFCG Org Mgmt, All works fine. If I go through PO13 and assign the position tecnical number the role, it does not take effect. A field "Generated" exists but is not marked. (infotype 105 is populated and is in a valid time period)Does a report or system setting have to be set for this to take effect. RHPROFL0 has been run as well as PFUD. Or does SAP not support direct creation of infotype 1016 through PO13 anymore?
Thanks
Rob M
Answer:
Infotype 1016 can be used to assign roles to positions and I find it easier than the org management in PFCG.
You need to ensure you use the correct relationship and once it is assign you will have to run the user reconcile. Assigning the role to the infortype does nothing but assign it to the infotype. You will then either have to run PFUD, RHPROFL0 or User compare in PFCG or SU01 to get the roles assigned to the user using the options for "take HR org level into consideration"
_________________
John A. Jarboe
Answer:
John
in one of my previous assignments we used the HR roles assignment as well and had RHPROFL0 run in batch mode every nieght , what do you think of that?? Is that a good suggestion to do here as well, for Rob?
Answer:
Running RHPROFL0 in batch is a base requirement for security by position. It can be run in batch , preferably at night but this will depend on the global nature of your business.
_________________
John A. Jarboe
Answer:
Thanks
We plan to schedule the job. Presently though, when we update access to a position through PO13 (which I agree is easier), then run all the update jobs, it does not update. Presently I'm looking at all the valdity periods to see if that is the problem. Will keep posted.
Answer:
Here is the solution
On OSS note 935941 SAP disabled the linking of Profiles to org structure.
An incompatible change was delivered with Note 568976. Before you implemented the note you could define generated profiles in infotype 1016. You could use the RHPROFL0 report to pass these profiles on to the user. After implementing the note this is no linger possible. You can only use the RHHPROFL0 report to pass manually created profiles on to the user.
Solution
Infotype 1016 can no longer be used for generated profiles. Instead, you must use infotype 1001 to link the assigned role to the corresponding organizational object. If required, a conversion program can be provided. If you require this conversion program, w rite a message in component PA-BC with reference to this note.
You create the relationship for B 007 and Role and then when you run RHPROFL0 updates are done.(also run PFUD or RHAUTUPD_NEW) Access will appear in Blue indictating the access is granted from your org structure rather than through SU01 directly.