Question:
hi
how many roles can be assigned to a user . thanks
-tp
Answer:
hmmm.... as many as you have, though
sorry about not giving you a direct answer...
are you affraid about getting close to reach a limit?
maybe the concern should be keeping a good administration on roles, preventing their number to have a "sky high" increase.
try using forum's search engine for more info, it's very often asked and discussed about it.
you should try on "roles and limit"
by the way, take a look to...
/forums/viewtopic.php?t=52935
regards.
_________________
by finding out what the problem is, you got 50% of the solution.
( sentence is not mine, but trust me, it's true! ).
full time member of 'tuly idiot club'.
Answer:
I think there is a limit on the roles table for entries per user, but you should be thinking about a more pressing issue. There are limits on the userbuffer. SAP's standard value I think is 2000, which means you are allowed 2000 authorizations. Anything else is truncated and forgotton regardless of assignment in SU01.
Remember always.. roles = profiles and profiles = authorizations. You assign a whole bunch of roles, you might put the authbuffer table over the limit...
_________________
"SOX.. hmm .. Aren't they the baseball teams in Boston and Chicago?"
Kind Regards,
IamEvilHomer
(Wayne)
Answer:
The limit is based the number of profiles you will end-up assigning to the user. there is a hardcoded limit at 300 if memory serves based on the constrains on the file in table USR04. so the number of role is somewhere arround 300. Some roles contain more than one profile so there is not a one-to-one correlation and COMPOSITE roles muddy the water even further.
If you have Auth/new_buffering at 3 or higher there is not an authorization limit in the buffer. In earlier versions the range will ne from 2000 to 5000+/- dependign on the version of SAP and patch level.
If you have more thatn 2 to 5 roles to attach to a user you have a serious design problem.
Answer:
.....If you have more thatn 2 to 5 roles to attach to a user you have a serious design problem.
hi john, isnt it too general or (bias) to make that statement?
Answer:
Nope.
Answer:
Not at all. I have reviewed many, many implementations, those which have been built at a task level, assigning 10+ roles (typically through composites) have had problems with extraneous access, SOD etc. When roles have been designed & built at job level, many of these problems have been reduced. This is not a statement from personal preference, more findings from seeing many different types of build.
Answer:
hi all
thanks for the replies . right now user buffer is not the problem in my case . i have assigned lot of single roles to the user . but some of the roles have red lights even after user compare . if i do the user compare for one role its changing to green but at the same time the other role chaning to red . It seems that system only allowing certain no of roles to green . any ideas !
-tp
Answer:
Your "non-green" light problem can stem from many places and SAP is trying to tell you something that you MUST reconcile ( Fewer roles less time researching). THe phenomonon can be caused by your system having the wrong support pack, the Status records from the source system are out of sync witht he target system (PFUD usually corrects) Someone is manipulating the UST04 tables, the transport failed and records are missing, the transport Reduced or increased the number of Profiles associated with a role, you neeed to run SUPC to regen the roles, your from-to date on the role assignment has expired, and the list goes on, By all rights the lights should be green.