Best practices / preferred usage of SAP standard (delivered) roles

Dear Experts,
When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles?  I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch.  A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
Thanks for any insights!

> When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles?
Those are provided by SAP as a reference so that you can consult with the Authorization Structure of a Standard Position / Task for which you are going to create your own role. For e.g. what are the TCodes, values of Objects should be given to users for their tasks.
I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch.
Absolutely! Please do not use SAP delivered roles for you use and also don't try to alter any values.
A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
>
> In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
>
> Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
>
Yes.. as reference.. as you say..
Regards,
Dipanjan

Similar Messages

  • Best practice for deletion of SAP standard configuration

    Does anyone have any documentation related to deletion of standard SAP configuration?  My client is requesting deletion of all the standard delivered company codes and I believe it is best practice to never delete them.  I am looking for supporting documentation that supports this.

    Rhonda,
    I have never seen a system where the standard delivered company codes did not exist, so I can't say what the implications of deletion are.  I suppose it is possible to do....
    For documentation,  I guess you could search through service.sap.com/support. 
    I would think you would respond to the request as follows:
    Tell the client it will be extra work to delete the items.  Which will translate into additional billable fees.
    Tell the client (in writing) that you cannot predict what all possible outcomes will be, but that you are willing to work with him to fix anything that gets broken in the process.  For additional billable fees.
    In the end, the client is paying for your advice and your services.  In the end, he owns the license and the system upon which it is running.    He can have anything he wants, there is no other 'right' or 'wrong'.
    I suggest you don't delete anything in client 000.  Most companies keep this as a reference.  If the client later decides to reconstruct, this would be a nice source of info.
    Since company codes greatly affect FI/CO, you might want to post the question in one of those forums.
    Best Regards,
    DB49

  • Error while Connecting report Best Practices v1.31 with SAP

    Hello experts,
    I'm facing an issue while trying to connect some of my reports from Best Practices for BI with SAP.
    It only happens when it's about info sets, the other ones that are with SAP tables go smoothly without a problem.
    The most interesting is I have already one of the reports connected to SAP info sets.
    I have already verified the document of steps of creation of additional database that comes with BP pack. They seem ok.
    Here goes what Crystal Reports throws to me after changing the data source to SAP:
    For report "GL Statement" one of the Financial Analysis one which uses InfoSet: /KYK/IS_FIGL_I3:
    - Failed to retrieve data from the database; - click ok then...
    - Database connector error: It wasn't indicated any variant for exercise (something like this after translating) - click ok then
    - Database connector error: RFC_INVALID_HANDLE
    For report "Cost Analysis: Planned vs. Actual Order Costs" one of the Financial Analysis one which uses InfoSet: ZBPBI131_INFO_ODVR and ZBPBI131_INFO_COAS; and also the Query CO_OM_OP_20_Q1:
    - Failed to retrieve data from the database; - click ok then...
    - Database connector error: check class for selections raised errors - click ok then
    - Database connector error: RFC_INVALID_HANDLE
    Obs.: Those "Z" infosets are already created in SAP environment.
    The one that works fine is one of the Purchasing Analysis reports:
    - Purchasing Group Analysis -> InfoSet: /KYK/IS_MCE1
    I'm kind of lost to solve this, because I'm not sure if it can be in the SAP JCO or some parameter that was done wrongly in SAP and I have already check possible solutions for both.
    Thanks in advance,
    Carlos Henrique Matos da Silva - SAP BusinessObjects BI - Brazil.

    I re-checked step 3.2.3 - Uploading Crystal User Roles (transaction PFCG) - of the manual where it talks about CRYSTAL_ENTITLEMENT and CRYSTAL_DESIGNER roles, I noticed in the Authorizations tab that the status was saying it hadn't been generated and I had a yellow sign, so then that was what I did (I generated) as it says in the manual.
    Both statuses are now saying "Authorization profile is generated" and the sign is now green on the tab.
    I had another issue in the User tab (it was yellow as Authorizations one before generating)....all I needed to do to change to green was comparing user (User Comparison button).
    After all that, I tried once more to refresh the Crystal report and I still have the error messages being thrown.
    There's one more issue in one of the tabs of PFCG transaction, it is on the Menu one where it is with a red sign, but there's nothing talking about it in the manual. I just have a folder called "Role menu" without anything in it.
    Can it be the reason why I'm facing errors when connecting the report to SAP infoSets? (remember one of my reports which is connected to an infoSet works good)
    Thanks in advance,
    Carlos Henrique Matos da Silva - SAP BusinessObjects BI - Brazil.

  • Best practices of integration with SAP Netweaver

    Hi All,
    I'm totally new to SAP Netweaver but I have a task to integrate our system with SAP ECC (R/3). We are using SAP Netweaver 6.4. The goal of integration is to provide for user list of available modules (Sales and Distribution, Human Resource, Payroll, etc) and when user selected for example Payroll we need to display list of available BAPIs. In general weare able to create Enterprise Web Service for some BAPI and consume it. But the problem is that everytime when administrator changed BAPI process (for example added new field to Business Object) we need to regenerate wsdl and change our client application. Does Netweaver provide some Web Service which can retrieve list of applications, list of BAPI processes and can retrieve meta data of some BAPI? Something like Partner Web Service interface?
    We are looking for best practices of integration with SAP Netweaver. We are trying to develop something like adapter which will be able to pull data into SAP ECC system is there any generic way to develop this adapter?
    Thanks in advance for your help.
    Yura.

    Hi Yura !!
    As far as I know, this is not possible yet. Using SAP Netweaver XI/PI, although it adds value to the webservice scenario exposing BAPI functionality, it also needs to maintain a refreshed version of the BAPI definition in its repository. Depeding the complexity of the change in the BAPI structure, maybe PI may allow you to continue working without changes.
    Maybe a good practice is not to make too much changes to a production BAPI, instead make a review in development environment, and once it is stable, use it in production. Other good practice is to keep older versions of BAPIs and add the changed ones as new versions to have back-compatibility
    Regards,
    Matias.

  • Best Practice for enhancing the SAP delivered standard WD ABAP application

    Hi,
    I am new to WebDypro ABAP.
    To enhance the SAP delivered Standard WebDynpro Component (complex component with Business objects & powl).
    Kindly let me know the best practice for enhancing the Standard WD ABAP from the below 1 or 2.
    1) To copy & create a "Z" of the component & make changes in that (or)
    2) to enhance directly on the same standard component without making "Z".
    Regards,
    NS

    Hi NS,
    If it is a standard component its better we go for enhancing the component rather than copying it into Z component.
    If there is any issue with in the standard component , SAP supports it through notes and OSS messages. If it is a Z component, SAP doesn't support it.
    If there is any up gradation of business packages, changes will be done to standard , but not the Z components, wherein we could miss it.
    Further, since it is a standard component it might have been used at many places, changes that has to done to reflect all changes might be difficult in this case if it is a z component.
    Regards,
    Harsha

  • Best Practices & Strategy Planning for SAP BI Architecture

    What are best practices and strategy planning that SAP BI Architect should know?
    What are the challenges are involved with this role ?
    What are the other information that this Architect should know to deliver the robust BI solution?
    Is there any white papers on the best practices on Architecture & Data Modeling, please ?
    Thanks,
    Venkat.

    Hi
    As per the Best Practice  first load the master and next transaction data .
    Please find the link for best practices
    http://www.sap.com/services/pdf/BWP_SAP_Best_Practices_for_Business_Intelligence.pdf.
    Regarding the architecture it depend upon the size of volumen and how much frequency  your load and  hard ware sizing
    based on this  we can provide best  solution
    If you any issues please let me know
    Regards
    Madan

  • Best Practice : Creating Custom Renderer for Standard Component

    I've been reading the docs and a few threads about Custom Renderers. The best practice seems to be to create a Custom Component where you need a Custom Renderer. Is this the case?
    See [this post|http://forums.sun.com/thread.jspa?forumID=427&threadID=520422]
    I've created several Custom Renderers to override the HTML provided by the Standard Components, however I can't see the benefit in also creating a Custom Component when the behaviour of the standard component is just fine.
    Thanks,
    Damian.

    It all depends on what you are trying to accomplish. Generally speaking if all you need is for the user interface output to be changed then a renderer will work just fine. A new component is usually made in order to provide some fundamental change in server side functionality not related to the user interface. - Ponderator

  • "best practice to maintain the SAP OM Org Structure"

    Hi SAP Experts,
    My client want to have an best practice or an safe process to update, better and maintain their existing SAP HCM Organizational Structure. In one way you can say that i am doing an process oriented job.
    Our client system is not up-to-date due to the lack of user awareness and complete knowledge on the system. Due to this they are unsure on the accuracy of the reports that comes out of the system.
    As a HCM functional consultant i can look from the technical perspective but not on this process oriented role. I need your guidance in this regard, please sugguest me how can i move ahead and make  some really valuable recommendations ? I am confused on where to start and how to start. Please help me in this regard.
    Thanks in advance,
    Amar

    The only thing u need to keep in mind the Relatioships between the objects in OM
    check the Tcode OOVK  for relationships and assigning those objects   PP01 , PP02
    Re: Organization Structure
    this thread may help u
    let us know if there is anything else
    Edited by: Sikindar on Dec 4, 2008 9:36 AM

  • Best Practice? - Implementing different sap portals on the same hardware

    We have a very large intranet portal implementation today spanning multiple boxes with 30k+ users on it.
    A different business group is asking us to build a sap vendor portal system, but would like to know if we can run it on the same equipment.
    The intranet uses ldap where the vendor will authenticate/authorize against the database. Aside from this, other configurations will be different. My gut feel is that this is something we should not do (mixing both intranet and vendor systems on the same hardware with different config's).
    Is there a best practice document that outlines if this is something that should be done or avoided. Also, if you have run into this and have an answer, would appreciate the feedback.
    Thanks in advance for the assistance,
    Todd

    Hi Todd,
       Technically there isn't a reason you couldn't run both portals on the same hardware assuming it is sized properly. You could even use the same portal if you wanted to.
    The thing I would be concerned with is security.  I assume you have more stringent security requirements for external facing applications than internal applications like the need for additional firewalls and reverse proxies.  Usually if you pursue the security requirements you will find the need for separate portal hardware. 
    Hope this helps
    John

  • Best practices for PMS in SAP

    Hi All
    Could you give the information about the best practices for PMS module in HR.
    We need to implement the PMS on SAP.
    and Could you say what are the pre-requisites to take while implementing. like need of proper organization structure/reporting structure.
    MVR

    Hi also need it it if you have some thing plz share it.
    thanks

  • List of available SAP standard delivered forms (print and interactive)

    Hi,
    does anyone know where to get a complete list of all available SAP standard forms (print and interactive) and where to download the latest versions of the forms?
    best regards
    norbert

    Hi Norbert,
        I am also looking for standard Adobe forms latest version . If you have got it , kindly tell me where i can get them .
        I  searched for stadard form SD_BIL_PRINT01 in my system in SFP transaction , but its not available .
       Kindly guide me regarding this issue .
    Regards,
    S.Sivakumar
    Edited by: sivakumar subramaniam on Oct 9, 2009 1:52 AM
    Edited by: sivakumar subramaniam on Oct 10, 2009 1:51 PM

  • Brazil - SAP Standard Delivered Rule / Config for R/3 ?

    Hi
    I have recently come across an issue with updating a Brazilian employees IT0008 - Basic Pay screen. I was trying to modify the start date of the screen (BEGDA) to reflect a date other than the 1st of the month. When I attempt to do this though I get a hard stop error message.
    I was told that this rule / hard stop error message in R/3 when trying to update IT8 for Brazil employees was as standard delivered SAP rule.
    I am trying to validate if that is the case, and if so if anyone can give me more details on this SAP delivered rule / functionality.
    If it's not a SAP delivered, but something my company has put in place perhaps, is there a way to find out in R/3 where this rule is set-up/referenced in order to remove it potentially to allow for IT8 Begda changes for Brazil ?
    Any help on this matter would be much appreciated and rewarded with points.
    Nicola.

    Please check the BADI under the following include
    Main Program     MP000800 
    Source code of   MPPERS00 
    Form - POST_INPUT_EDYNR
    Line - PERFORM badi_after_input(sapfp50m).
    IMP_NAME     BR_SALARY_INCREASE
    INTER_NAME     IF_EX_HRPAD00INFTY
    IMP_CLASS     CL_IM_BR_SALARY_INCREASE
    Main Program     CL_IM_BR_SALARY_INCREASE======CP      
    Source code of   CL_IM_BR_SALARY_INCREASE======CM002   
    method IF_EX_HRPAD00INFTY~AFTER_INPUT
    Line 23 - 35
    Regards
    Ravikumar

  • Benchmark Your Best Practices through the ASUG/SAP Enablement Survey

    One of the most frequent questions asked by companies implementing SAP is u201Chow do other companies get their employees ready to use the system?u201D They want to know how similar companies have addressed the most critical success factors for preparing and sustaining their end users for new technology deployment. SAP is consolidating knowledge of best practices used in the market through the ASUG and SAP Enablement Survey.
    ASUG and SAP have teamed together to build a survey that will allow respondents to gain insight into how the market is addressing enablement, and how similar companies rate their achievements. All responses are consolidated to provide insight on enablement practices by industry, company size, region, budget allocation, and more. Individual responses remain confidential.
    As a respondent you will receive a report outlining the most critical enablement practices implemented by comparable companies. The report provides specific insight about your enablement practice in relation to similar companies. Please take the time to complete this short survey (10-15 minutes) today. Your voice matters and we really appreciate you taking the time and completing the survey.
    Click on the link to access the survey:
    [ASUG/SAP Enablement Benchmarking and Best Practices Survey|http://www.benchmarking.sap.com/cgi-bin/qwebcorporate.dll?idx=CUX8C2&SHSP1Q2A=ASUG&LNG=0]
    Edited by: Claudia Mandelli on Feb 22, 2012 11:53 PM

    Hi ,
    Please find my answers below:
    1. The roles will be created in BW and should automatically appear in BO CMC Authentication SAP roles, if there is a connectivity setup between BO and BW irrespective of the SSO.The roles are transported by the BW security team.
    2. Every environement will have a unique connection to the corresponding SAP BW environment.For example SAP BW DEV will be mapped to BO DEV, SAP BW PROD will be mapped to BO PROD.So these settings cannot be migrated through Promotion Management.
    3.This authentication can be applied to all tools , the SSO does not depend on the tool ,it depends on the integration between two systems which in this case are BO and SAP BW
    As mentioned earlier, after integration all tools can have SSO
    You can refer to a lot of help documents on this site which will help you to setup the integration between SAP BW AND SAP BO.
    Kind Regards,
    Priyanka

  • Best Practices and Usage of Streamwork?

    Hi All -
    Is this Forum a good place to inquire about best practices and use of Streamwork? I am not a developer working with the APIs, but rather have setup a Streamwork Activity for my team to collaborate on our activities.
    We are thinking about creating a sort of FAQ on our team activity and I was thinking of using either a table or a collection for this. I want it to be easy for team members to enter the question and the answer (our team gets a lot of questions from many groups and over time I would like to build up a sort of knowledge base).
    Does anyone have any suggestions for such a concept in StreamWork? Has anyone done something like this and can share experiences?
    Please let me know if I should post this question in another place.
    Thanks and regards,
    Rob Stevenson

    Activities have a limit of 200 items that can be included.  If this is the venue you wish to use,  it might be better to use a table rather than individual notes/discussions.

  • Best Practice to start with SAP NetWeaver BI (BW) to become a BI consultant

    Hi there,
    I have one Question. As consultant for SAP NetWeaver Portal (Development/Java), I would like to start with SAP NetWeaver BI (System Configuration, Customizing and Development with ABAP/ABAP OO) through e-learning and/or with (e)books.
    A system for making practice is available.
    Can someone give me a helpful guide how to start and become a BI Consultant for system administration and development within the next 12 months?
    Some Questions I have noticed are:
    1) The system (application) environment of BI (what is integrated in it - e. g. within the portal, there is a storage for unstructured information like documents or virtual rooms for collaboration between departments - and what does it make)
    2) How does development in BI works (development environment, coding, debugging, building, deployment and test) and what is used stronger (ABAP or ABAP OO)? Here, I don't mean how to write ABAP or ABAP OO programs, only the infrastructure from development to transport to a target system
    3) How is a BI system to configure as default after installation?
    4) Good guides (e/books) to learn ABAP and ABAP OO (as far as possible oriented on the practive)
    Of course, these are only a few Question and far from complete. Details and other important points will be appreciated.
    Many thanks,
    Cengiz

    Hi,
    1) The system (application) environment of BI (what is integrated in it - e. g. within the portal, there is a storage for unstructured information like documents or virtual rooms for collaboration between departments - and what does it make)
    Document management from RSA1 transaction of BI helps to attach any unstructured documents at specific level in BI.
    2) How does development in BI works (development environment, coding, debugging, building, deployment and test) and what is used stronger (ABAP or ABAP OO)? Here, I don't mean how to write ABAP or ABAP OO programs, only the infrastructure from development to transport to a target system
    BI has got  a separate tool and GUI to perform all the Extract, Transform and load related activities. ABAP is part of BI but you don't need much extensive ABAP learning. Basic ABAP is sufficient to write routines and extractors.
    3) How is a BI system to configure as default after installation?
    May be a BASIS person can help you out here about the configuration but this is not the job of BI person.
    4) Good guides (e/books) to learn ABAP and ABAP OO (as far as possible oriented on the practive)
    You can search for SAM Series learn ABAP in 24 days book. This book is sufficient to learn the ABAP required for working in BI.
    But except ABAP you will have to completly learn the BI system to work efficiently.
    Regards,
    Durgesh.

Maybe you are looking for