Question:
Hi All,
I am working in an environment where it's role based security. In one of the role, field value is set to * which is pulling in all plants and obviously it's not too secured since user could release it for any plants. So, I am trying to make it into an Org level value by making this field into variable and I was wondering if anyone could assist me how to do it since it will be in the master role and when I generate it will flow into all derived roles. Someone advised me to user Tcode SUPO. It's not working for me. Any suggestion would be appreciated!!!!!
Answer:
Hi Shaksparov,
As you found out yourself, SUPO isn't the way to do it.
Use report pfcg_orgfield_create and select the field you want to make an org level. Be aware that you most likely has to do some reprocessing of your roles.
Take a look at note 323817. I think it will help you.
/Blast
Answer:
hi,
You should set * as the org level value for PLANT in the master role and once your master role is desgined push it to the derived role.
In the derived role, through PFCG you can set the organization value for a particular plant or for a range of values.
Regards,
Securall
Answer:
hi,
You should set * as the org level value for PLANT in the master role and once your master role is desgined push it to the derived role.
In the derived role, through PFCG you can set the organization value for a particular plant or for a range of values.
Regards,
Securall
it's safer to leave it blank in the master. If you forget to populate one of the child roles with the right data & assign it to a user, the impact will be less.
It's not likely but does happen.
Answer:
ignore my above post! having a stoopid moment
Answer:
Securall is right! the concept of master and derived role means that on the master role you will make a template for all derived roles, where you define which reports, transactions and so on can be executed. But you will not make any limititations on this level for organizational elements!.
(at this level you put a * ).
When deriving the roles , you will manually put in the correct organizational element restrictions (plant, company code,...) !
regards
Pelssers Davy
_________________
Davy Pelssers
Independant SAP Consultant CRM/BW/Authorisations
pelssersdavy@hotmail.com