Difference between Groups and roles?

Hi All,
What is the difference between groups and roles?
Thanks for your time and help.

Oracle does not have anything called a 'group'.
A role is a named object that can contain a set of privileges. The members of the set can be individual privileges or can be another role that contains its own set of privileges. Roles can then be granted to users (or to other roles) so that those users (or roles) have the specified privileges.
See the SQL Language reference - http://docs.oracle.com/cd/B28359_01/server.111/b28286/toc.htm
Read the topics for CREATE ROLE, GRANT and REVOKE

Similar Messages

  • Difference between profile and role

    Can any explain me the difference between profile and role.
    I was given a user Id on ABAP stack of XI.
    My profile: SAP_ALL
    I was not assigned any roles.
    I am not sure if I need different roles or this profile
    would serve the purpose.
    -Naveen.

    Hi Naveen,
    Adding to Gus points a few more inputs.
    Profiles were the menas of assiging authorizations to users until 4.0 Versions.
    Later to the same it was upgraded to the concept of Roles. The crux always remains the same.
    Be it a profile or a role, it contains the Auth Object and the respective values.
    But in present scenario, you can get confused by the profiles that are assignable to Users.
    IN short the following points can be helpful.
    1. The profiles like SAP_ALL;SAP_NEW,S_SPO_ALL etc are standard Profiles delivered by SAP which when assigned to a user in his profile in SU01 would get all the related authorizations.
    ( You must be lucky to have SAP_ALL assigned to ur ID by ur basis guy)
    2. A role is created by assigning a few transactions to this role and when this role is generated, it generates a PROFILE. But this profile is a system generated one and cannot be ever assigned to any user. These profiles can be sorted out as they have the standard naming like T-XXXXXXXX where they are the numbers and it can never be assigned to any user.
    3. Note prior to 4.0 its all Profiles that are assigned to users and later to the same came the concept of Roles and hence this change.
    Hope the answer is helpful in making u undersand a few inputs form my side.
    FYI:
    Method to create a role can be checked out from the link below.
    http://help.sap.com/saphelp_bw21c/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
    Br,
    Sri
    Award points if answer is helpful.

  • Difference between ID and Role based Administration - Firefighter 5.3

    In GRC AC 5.3 Firefighter, security guide, there are two sections for role design,
    1. Firefighter Role based Administration
    2. Firefighter ID based Administration
    Can someone explain what is the difference between the two?
    I have read the documentation, but it does not have a clear description of the
    differences between the two.
    Please help.
    Thanks

    HI Prakash,
    Though both of them eventually achieve the same function, that is giving access rights to the user for a certain period under monitring these differ based on the following:
    1. Firefighter Role based Administration
    You identlfy a particular role as a firefighter role and give it to the user.
    2. Firefighter ID based Administration
    You create a separate user altogether and give the normal dialog user, the access to this user's authorization.
    For the implication that both of these have and the differences or comparisons between using 1 & 2, I would suggest you do a bit of Mock testing for both of these. Also, there are a lot of posts related to this on the forum already, which you can refer to, for getting a more detailed idea on this topic. Unlimately, it depends on organization to organization which methodology they folow as per what suits them, according to features which both have. But generally what is preferred is Number 2.
    Regards,
    Hersh.

  • Difference between group by roll up and group by cube

    Please let me know with an example for the difference between group by roll up and group by cube.
    thanks,
    Vinodh

    http://download.oracle.com/docs/cd/B19306_01/server.102/b14223/aggreg.htm#sthref1601

  • Difference between Groups books/IFRS and Local Stats Depreciation Areas

    Hi
    We created assets with difference useful life between Groups and Stats of which the asset depreciation difference between two dep areas is posted in to seperate GL account starts with "S" used for local stats purpose. Any idea how to avoid this difference getting posted to other stats GL account.
    We also tried to have same useful life between dep areas. But still i can see depreciation difference is getting posted in dep area 30.
    Kindly help.
    REgards,
    Hari

    Hi Hari
    Welcome to SDN.. This is standard behaviour....
    If you have 2 dep areas posting to FI, then you need to create a 3rd depre area as Delta Dep Area which manages the differential posting between Dep Area 01 and Parallel Dep area
    Only solution to avoid this is to have the Parallel Dep Area as STatistical Dep Area i.e. It should not post to FI (Indicator 0 in OADB)
    br, Ajay M

  • What is the difference between "Group Albums" and "Albums"

    What is the difference between "Group Albums" and "Albums"

    An album is a shareable object; you can add photos to an album, then subsequently share that album with someone else. It's better than sharing your whole library, and allows you to make and share lots of different related sets of photos.
    Group Albums allow you to collaborate on an album with others. Both you and the collaborators can upload photos or videos, and view them in My Library. All members of the Group Album can also edit, copy, print, and download the items in the album.
    Only members of Photoshop.com can participate in Group Albums. But since membership is free, you can invite nonmembers to participate in a Group Album, and they can create a Photoshop.com account and contribute files.
    -Mark

  • What is the differents between Policies and Preferences in Group policy Management Editor

    What is the differents between Policies and Preferences in Group policy Management Editor?

    Policies: If you delete a policy in GPO it deletes its registry files form the clients. Policies don't tattoo the registry. Policies Settings are permanent as long policy is in effect i.e. Desktop Backgrond. Policies are applied at Computer
    Startup, User logon and Manual and automatic refresh. Takes Precedence over Preferences.
    Preferences: Even if you delete a policy form Preferences tab the registry files will still available on the systems. Preferences tattooed the registry if you want to remove the registry entries you have to do it manually. Preferences exampl
    is i.e. mapped drive. Settings applied with preferences are not grayed out. Not available in Local GPO.
    Usefull for
    Desktop Icons/Shortcuts
    Url
    Drive Map
    File Copy, Update, delete
    Thanks

  • Difference between S_PROGRAM and S_DEVELOP!!

    Hi All,
    Can anyone please tell me the difference between S_PROGRAM and S_DEVELOP..??
    I think both are used to protect the access to the ABAP programs..Then how it's different from each other?
    Thanks in advance,
    Ram

    Hello Ramkumar,
    S_PROGRAM authorization object is used as mentioned, to protect execution of the program:
    For example ig you have a program called "ZPROGRAM" and you want to secure the program such that only a select few people can execute it, you need to assign an "authorization group" (dont confuse this with the authorization group value used in S_TABU_DIS).
    To assign the authorization group to the prgram go to transaction SE38 type in the progrm name and click on edit
    (Please note that you need a DEVELOPER key to edit the program)
    Then once you the program is displayed use the menu option:
    GOTO--> attributes
    One of the field displayed here is "authorization group". You have to assign the authotization group here (the field name is SECU) (these authorization group values are stored in table TPGP).
    But as suggested by Julius RSCSAUTH is a better option especially since Security guys wont have access to developer keys.
    Once this is done, the authorization group has to be assigned in the object S_PROGRAM in an authorization role.
    Only if the role containing this object (with the appropriate value) is assigned to the user, he will be able to execute that program.
    S_DEVELOP is used to create / modify / change programs (and their attributes). This authorization is only necessary for ABAP developers / prgrammers and you should avoid assigning this to anyone else.
    Hope this helps.
    Regards,
    Prashant

  • Posting of difference between PO and invoice by authorization level

    Hi all,
    I have a question on price difference between PO and invoice. 
    If i want to restrict postings of invoice by authorization like the following, is it possible to be done?  If yes, how?
    Clerks only allowed to post those invoice with no difference and rounding difference (small difference).  Other invoice with difference (not caused by rounding) can be posted by a higher authorised person and not the clerk.  Can this type of authorization be set? 
    Thanks.
    Regards,

    Hello
    First decide on the authorization roles for different users.
    Then these roles can be set by the BASIS team.
    Also tolerence groups for different users and amounts can also be set.
    Tolerances for Employees
    To carry out the activity, choose one of the following navigation options:
    Transaction Code     SPRO
    IMG Menu     Financial Accounting ® Accounts Payable Accounts Receivable  ® Business Transactions ® Incoming Payments  ® Manual incoming payments ® Define Tolerance Groups for Employees
    Tolerances for Business Partners
    To carry out the activity, choose one of the following navigation options:
    Transaction Code     SPRO
    IMG Menu     Financial Accounting ® Accounts Payable Accounts Receivable  ® Business Transactions ® Incoming Payments  ® Manual incoming payments ® Define Tolerances (Customer)
    Regards

  • Difference between Null and null?

    What is the difference between null and NULL?
    When is each used?
    Thanks,

    veryConfused wrote:
    There is a null in java, but no NULL. null means no value. However, when assigning value, the following is different:Although the empty String has no special role. Null means, the referential type is not assigned (doesn't refer) to a specific object. The empty String is just another object though, so seeing it or pointing it out as something special when it actually isn't at all (no more special than new Integer(0) or new Object[0]) just adds to the confusion.

  • What is the difference between upgradation and migration.

    Hi Guru's
    what is the difference between upgradation and migration.
    actuallly i involved in upgradation project, here my role is
    1. first i check the query's in 3.5 save the query and transport the query. and check the query in bex analyzer also.
    2. go to BI .7  find the query;s ,give the query name and save the query ,
    3. once save the query, again will come to 3.5 open the query , it will not open. this is my job here,
        come to 7.0 check the query in analyzer also.
    i am having littile bit confusion, how it will comes query in 7.0, why are u saving the query's in 3.5 and 7.0
    query's already available in 7.0 why are u doing this work?
    can i know the upgrades those  objects, is it neccessary, if necessary how can i upgrade.
    infoobje , transferrules, transferstructure ,infosoure, datasoure,updaterules, ods, cubes.
    Points will be Assingned ,
    Thanks & Regards
    prabhavathi

    Hi,
    I was talking in a general sense not on a query level.
    If your taling about migration in that level meaning as a part of larger upgradation (in your case 3.x to 7) there may be many places where you need to do this kind of activities.
    Fr eg migration into new data flow, Migration of Web templates from BW 3.x to Netweaver 2004s, etc
    Hope this helps.
    Thanks,
    JituK

  • What's the difference between Mozilla and Firefox

    what's the difference between MOZILLA and FIREFOX?

    Firefox doesn't include the SeaMonkey suite.<br />
    SeaMonkey is a separate program (not just a browser, but a suite) maintained outside the Mozilla Corporation.
    From http://en.wikipedia.org/wiki/SeaMonkey
    <blockquote>SeaMonkey is a free and open source[3] cross-platform Internet suite.<br />
    It is the continuation of the former Mozilla Application Suite, based on the same source code.<br />
    <br />
    The development of SeaMonkey is community-driven, in contrast to the Mozilla Application Suite, which until its last released version (1.7.13) was governed by the Mozilla Foundation. The new project-leading group is the SeaMonkey Council.
    </blockquote>

  • Difference between tRFC and RFC

    Hi Experts,
    Can any one help me in details to differentiate tRFC from RFC in their application perspective.
    And also let me know the role of ALE and BAPI in both the connection log.ie,Where we have to use ALE and BAPI.
    Regards
    Kumar

    Hi,
    RFC = Remote Function Call and TRFC = Transactional Remote Function Call
    Transactional RFC and Queued RFC are variants of the Remote Function Call that make the data transfer between different SAP R/3 systems more reliable and more secure.
    Transactional RFC 
    http://help.sap.com/saphelp_nw04/helpdata/en/8b/ceea3b31aac554e10000000a114084/content.htm
    RFC Help link
    http://help.sap.com/saphelp_nw04/helpdata/en/b0/eae2a889e711d2956500a0c94260a5/frameset.htm
    Refer BAPI & ALE
    what is difference between BAPI and ALE
    Re: ALE & BAPI communication
    Re: bapi-ale interface
    /Srinivas

  • Differences between LSMW and BDC

    Hi All
    Please can you give me the few points about the differences between LSMW and BDC?
    Awaiting for your Responce
    Praveen

    Hai Check with the following document
    GOOD
    THERE IS THREE TYPE OF METHOD IN BDC
    BDC SESSION
    CALL TRANSACTION
    CALL DIALOG
    What is BDC or batch input
    The Batch Input is a SAP technic that allows automating the input in transactions. It lies on a BDC (Batch Data Commands) scenario.
    BDC functions:
    · BDC_OPEN_GROUP : Opens a session group
    · BDC_CLOSE_GROUP : Closes a session
    · BDC_INSERT : Insert a BDC scenario in the session
    · The ABAP statement "CALL TRANSACTION" is also called to run directly a transaction from its BDC table.
    It runs the program RSBDCSUB in order to launch automatically the session. The session management is done through the transaction code SM35.
    The object itself is maintanable through the transaction SE24.
    BDC methods:
    Method
    Description
    Parameters
    OPEN_SESSION
    Opens a session
    SUBRC (Return Code – 0 OK)
    SESSIONNAME (Session to be created)
    CLOSE_SESSION
    Closes a session
    None
    RESET_BDCDATA
    Resets the BDC Internal Table...
    None. Normally, for internal purpose…
    BDC_DYNPRO
    Handles a new screen
    PROGNAME (Name of the program)
    DYNPRONR (Screen Number)
    BDC_FIELD
    Puts a value on the screen
    FIELDNAME (Name of the field)
    FIELDVALUE (Value to be passed)
    CONSTRUCTOR
    Constructor - Initializes NO_DATA
    NODATA (No data character). The constructor is called automatically when the object is created.
    RUN_SESSION
    Launches a session with RSBDCBTC
    None
    CALL_TRANSACTION
    Calls a transaction with the current BDC Data
    MODE (Display Mode)
    UPDATE (Update Mode)
    TCODE (Transaction to be called)
    BDC_INSERT
    Inserts the BDC scenario in the session
    TCODE (Transaction to be called)
    BDC techniques used in programs:
    1) Building a BDC table and calling a transaction,
    2) Building a session and a set of BDC scenarios and keeping the session available in SM35,
    3) Building a session and lauching the transaction right after closing the session.
    BDC using Call Transaction
    BDC using Call transaction involves calling an SAP transaction in back ground from within the ABAP
    program. The process involves building an Internal BDC table containing the screen information needed to
    execute the required transaction and then passing this to the Call transaction command (See code example).
    The full procedure for creating a BDC program is as follows:
    What is the difference between batch input and call transaction in BDC?
    Session method.
    1) synchronous processing.
    2) can tranfer large amount of data.
    3) processing is slower.
    4) error log is created
    5) data is not updated until session is processed.
    Call transaction.
    1) asynchronous processing
    2) can transfer small amount of data
    3) processing is faster.
    4) errors need to be handled explicitly
    5) data is updated automatically
    BATINPUT/DIRECT INPUT
    A: Batch-inputs can not be used to fill the "delivery due list" screen because it is not a dynpro. This is a standard SAP report. A SAP report (check with "System -> Status") may be called using SUBMIT sentence with the appropriate options . It is preferred to call a report than create a Batch-input program.
    GO THROUGH THIS LINK
    http://www.guidancetech.com/people/holland/sap/abap/zzsni001.htm
    The LSM Workbench is an SAP R/3 based tool that supports the one-time or periodic transfer of data from non-SAP systems ("legacy systems") to SAP systems.
    The LSM Workbench helps you to organize your data migration project and guides you through the process by using a clear sequence of steps.
    The most common conversion rules are predefined. Reusable conversion rules assure consistent data conversion for different data objects.
    LSMW vs DX Workbench
    The LSM Workbench covers the following steps:
    Read the legacy data from one or several files (e.g. spreadsheet tables, sequential files).
    Convert the data from source format to target format.
    Import the data using standard interfaces (Batch Input, Direct Input, BAPI, IDoc).
    Experiences made in successful implementation projects have shown that using the LSM Workbench significantly contributes to accelerating data migration.
    SAP provides this tool along with documentation to customers and partners free of charge.
    Users of the LSM Workbench receive the usual support via SAP Net - R/3 Frontend (component BC-SRV-DX-LSM).
    Releases:
    Version 1.7.2 of the LSM Workbench ("LSMW 1.7.2") available
    Attention : LSMW 1.7.2 requires an SAP R/3 system with SAP R/3 4.0 or SAP R/3 4.5.
    Version 1.8.0 of the LSM Workbench (1.21mb) ("LSMW 1.8.0") available
    Attention : LSMW 1.8.0 requires an SAP R/3 system with SAP R/3 4.6.
    Version 3.0 of the LSM Workbench (1.89mb) ("LSMW 3.0") available for Web Application Server 6.10
    Attention : LSMW 3.0 requires a SAP WAS 6.10. Functionality of version 1.7.2 and 3.0 are identical !
    Version 4.0 of the LSM Workbench ("LSMW 4.0") integrated in Web Application Server 6.20
    Attention : LSMW 4.0 is an integrated part of SAP WAS 6.20.
    Thanks & regards
    Sreenivasulu P
    Message was edited by: Sreenivasulu Ponnadi

  • Regional Settings differences between 2008 and 2012

    Hi There,
    Can anyone explain why some of the regional setting details have changed with Win 2012?
    Example: Dutch (Belgium) - nl-BE
    The 'Digital Grouping Symbol' has changed from a DOT to a WHITESPACE.
    2008 - €1.000,00 whereas 2012 - €1 000,00
    If the settings are changed on the servers will they persist after OS updates etc?
    Rgds,
    Frank

    Hi Vivian,
    I see no reference in the KB article to modifications for the CET timezone nor any reference to the resolution of culture format info discrepancies.
    A further issue is that the active regional settings on our PRD servers will be set to United States and it would appear that any modification to the Belgium locales (i.e. nl-BE, fr-BE) are not persisted once you switch to United States as the
    active setting.
    The knock on effect of this is that for our PRD web-applications (which are active across many regions), we have to write code to override the OS information. .NET uses the OS info to populate its Culture information.
    Could you confirm if the differences between 2008 and 2012 are the result of a bug or are the changes planned? Based on communication with some of our customers in Belgium, they are of the opinion that the 2008 (and Win 2003) settings are per their expectations.
    I really do not what to have to handle these situations across our application landscape and am sure that other people with globalized applications will also hit problems.

Maybe you are looking for