HR Position Base Security Discussion

Question

Hello all,
We all know the beauty of using HR position base security vs manual role assignments to user IDs.  Roles are automatically assigned and removed during a move with HR position base security.
Recently a question came up regarding HR position base security and I have a few ideas on how to address the question but Iu2019m just curious how some of you have dealt with this issue.  This thread will be more of a discussion than a question.
Issue/Example in regards to HR position base security:
User-A is in position#1 and has been granted access to SAP after successfully completing SAP Accountant Training.
Position#1 have the following roles:
Z-Accountant
Position#2 have the following roles:
Z-Finance-Director
If User-A got a promotion and is moved to position#2, he will automatically inherit Z-Finance-Director and assignment Z-Accountant will be removed. 
How can you justify assigning Z-Finance-Director even though User-A did not take the SAP Finance Director training?
Your response will be appreciated.
Regards,
John N.

Answer 1

>
Morten Nielsen wrote:
> Hello John
>
> Well at the end of the day the roles are always assigned to the user.
>
> But what you can do is create a reletaion between the Role and an entity in you HR-OM System. Based on that, and an evaluation path, you can retrive the required role for the user and let the workflow assign it automatically. (You might need a HR consultant to help you out here).
>
> So infact you can decide if you want to map the roles to a Position, an organizational unit, a Job etc. (but as always it's a good idea to to decide on a strategi otherwise it can endup in a big mess )
>
> regards
> Morten Nielsen
Morten,
If we decide to assign the roles to the HR position after the completion of the workflow it should assign the roles to the UMR (using RHPROFL0 & PFUD) automatically which is great.  But now that the roles are assigned to the position aren't we back on the same vicious cycle of a user authomatically inheriting roles on the position and at times not having training on the roles automatically assigned.
Perhaps I just need to research the the following that you mentioned. 
>
Morten Nielsen wrote:
>
> But what you can do is create a reletaion between the Role and an entity in you HR-OM System. Based on that, and an evaluation path, you can retrive the required role for the user and let the workflow assign it automatically. (You might need a HR consultant to help you out here).
>
> regards
> Morten Nielsen
Again thanks for the suggestion.
Regards,
-John N.