SRM Roles - Composite versus Single

Hi Guru's
I am at the devlopment stage of building roles for an SRM implementation and have been advised to build composite roles as opposed to single roles.
What are your experiences of composite roles against single roles in SRM ?
In other modules we have found single roles to be better as they are easier to analyse as far as errors are concerned ,also with the absence of an SU53 type transaction in SRM I would imagine that analysing errors in composite roles will prove more complicated than in single roles.
Has anyone experience or advice on this issue ?
Thanks
Simon

Hi if you need to do this from a NON-CUA system to all other systems in your landscape go to transaction PFCG
1. Transaction PFCG
2. Perform mass import of roles from other systems to the reference system( or the system you wish to do this analysis)
3.Click on role tab on the main menu , choose read from other system by RFC
4. Then You can enter either an RFC destination
or a variable which points to an RFC destination as target system
(Define variables in transaction SM30_SSM_RFC).
5. Now you can follow the instruction as per other Experts instruction ( AGR_AGR ) table
Follow the above steps if you need to do this for various other SAP systems.
Basically you are getting all the roles to one central place
secondly an RFC connection with necessary authorization is required between each of the systems you are trying to analyze
Edited by: Franklin Jayasim on Jul 14, 2010 6:54 PM
Edited by: Franklin Jayasim on Jul 14, 2010 7:15 PM

Similar Messages

How to find the T-codes that's in a Single Role & Composite Role??

Hi all,
Some of the user have authorization to particular t-codes. However single roles are not created for them.
Now I need to assign authorization to that particular t-code to a new employee.
Since the single role is not there, I do not know how to find if it is inside a composite role.
Which table should I find all the t-codes that are assigned to a single role / composite role?
pls help.
Regards,
Pri

Rakesh Kulkarni wrote:>
> Table AGRS_TCODES give the roles with their tcode assignment.
Beware of AGR_TCODES, it only reports transactions entered into the role menu. If you query table AGR_1251 filtered on object S_TCODE you get the actual transaction authorizations.
Besides that, authorizations are always in single roles, so if you cannot find them there there's no point in searching through the composites.

SRM role design

Hi All,
I have few queries regarding SRM role Design.
- I do not find WebDynpro applications for certain requirement, like Create Contract. How do i add this requirement? FYI, SAP standard role uses Floor Plan Manager '/SAPSRM/WDA_L_FPM_OIF' and has named it Contract Details. Is this correct?
- There are no Authorization objects which come automatically on adding a WebDynPro application. Do I need to configure SU24 for each WebDynPro? I do not think it is to be done, since in SAP standard role, auth. objects have been added manually.
- How is a Business role on EP linked with its corresponding SRM role?
- Do i need to use BSP applications also?
- i have requirement to create SRM MDM role and SRM role. So, is SRM MDM role also to be created on SRM server?
Regards

Which transaction(s) are the user ID´s designed to use for this?
Can it be assumed that the "billing" is resulting from the "dispatching" (Warenausgang) or a milestone of some project?
Where is the user and the role?
Sorry I dont understand the question. Perhaps you should first ask functional questions about this in the Sales and Distribution type of forums to get a real technical feasability answer, then attempt an authorization (role) to enable it.

Multi schema versus single schema set up

Hi,
I have a question regarding the environment set up of an Oracle datawarehouse regarding multischema versus single schema set up. My database has several schemas on it representing the functional areas of the warehouse. I have installed the Runtime Repository on the Database and registered each target schema with it. Now that I have started developing, I have noticed the way in which OWB builds database links for mappings which have source and target objects residing in different schemas. I therefore have a major concern regarding the performance of such a set up as opposed to one with a single schema. If anyone has had any experience of working with both environments please could they advise me.
Your comments will be most appropriate.
Take care
Mitesh

The requirement of sigle or multi schema is driven by the business requirement and it is a policy descion than a techical one.
Depending upon requirement you can have not only multiple schemas but also multiple instances or databses or server for OLTP , Staging and Star
Normally for good performance staging and star (which means one for each layer) a schema is created as it offers good performance over single schema set up.

Couldn't able to pass SharePoint group to Composite or single Task activity in Declarative workflow

Hello,
Couldn't able to pass SharePoint group to Composite or single Task activity in Declarative workflow.
Any Help would be appreciated!!!!
Thanks regards, Vignesh.

You can use a Active Directory\exchange group here.
SharePoint group can be used to send emails

SOX report containing only composite, without single roles.

Hello SAP experts.
I have a question regarding SOX report. Would it be possible to somehow set/filter the report to only display COMPOSITE roles but not the generated single roles?
For example role ZHRFIC_EMPLOYEE has a generated role ZHRFIS_EMPLOYEE. When i run SOX, both of the roles are displayed, which is what i do not want. Only ZHRFIC_EMPLOYEE is what i want to be displayed and afterward to be put in the excel.
Thanks for replies in advance.

Hi,
I am actually doing this throug SUIM > USER > By complex selection criteria. Then i fill User Group field with the needed user group and execute.
A bunch of users comes out with all of their profiles / roles and if the user has any composite role then also the single roles appear in the report. Is there any option to disable displaying of generated single roles?
Thanks in advance!

Should I install Print Services as a role for a single server env no domain

I have a OAS application using converted UNIVERSE code to work with withSQL server. The application works fine and local users and groups will do the job. I have been tasked with replacing UNIX based printing to Windows based printing. Don't need LDP services
either. Does it make sense to install print services for about 30-40 printers or just set them up local. There will be about 10 different forms and i will have to be able to re-direct jobs, pause jobs, re-queue jobs, and disable\enable the printers.
I don't know that version 3 or 4 printer drivers matter because the same printer driver will be used for a majority of print jobs. As a matter of fact there are 5 or 6 different drivers needed. This is setting on a 100 MB backbone with GB access to the server.

Hi,
Print Services enables you to share printers on a network and centralize print server and network printer management tasks by using the Print Management snap-in.
Print Management helps you monitor print queues and receive notifications when print queues stop processing print jobs. It also enables you to migrate print servers and deploy printer connections by using Group Policy.
Print Services Role
http://technet.microsoft.com/library/cc732378(WS.10).aspx
I’m not quite clear about your current provisioning, as referred in the title, for single server without domain. I think this role is not necessary for you.
Hope this helps.

How to insert entities for a role and retrofit single trigger from DB

Hi,
before Oracle Designer replacement I would like to clarify these 2 issues:
- how to insert entities for a role?
- how to retrofit just a single trigger from database?
Could somebody give a step by step advice, how to do these 2 things? Thanks!

> um.. i don't think you could use 'create table'
inside a pl/sql procedure.
You are wrong. You can create table inside a PL/SQL using execute immediate. But, this is not a good practise. I think you should reconsider the logic and then use such programming code. Please read the Oracle documentation regarding execute immediate.
Regards.
Satyaki De.

Cfolder with SRM, role and the result not match

Dear All,
We are using Cfolder in SRM. But I found I cannot control it by role.
For example, the Cfolder user only has a 'Read' role in the Collaboration area or Public area, but this user still can create or delete any folder or document in this area.
Very appreciate your help!!!
Karl.

Maybe your answer is part of the problem, this photos I took with Sony RX100 M3 and I do not find the right profile for this camera.
But why the pano work perfect with the PS CC?
Thank you

How to create different roles into a single profile

Hi All,
I would like to create different roles and add all them to a single pofile. But when I try, it is asking for a profile name for every role that I create.
I have also tried to give the same profile name while creating a second role, but it is giving me error that the profile name already exists.
Can someone help to get some clarity on this?
Thanks
Vijay

Hi,
I agree with you. But, whenever I try to create a single role, it is asking for a profile name that has to be assigned to that particular single role. I cannot go further until I give a profile name.
How can I create a single role without creating a profile?
Thanks
Vijay

Adding Single Role to Multiple Single Roles

All
I am planning to add individual Role to Multiple Composite Roles
Is there any quickest way to do it?
Please let me know.
Thanks in advance.
Regards,
Pranav

You can definitely play around with CAT script and accomplish it.
If you have Mercury QTP, then its very easy to do that using custom scripts.
Regards,
Zaheer

SU01 role add versus role change inside customer exit Z_USERS_TRANSFER

We're using customer exit Z_USERS_TRANSFER (reference note 367660) to do some custom code after a SU01 save. The "changed" roles are transferred through an internal table and I'm also querying the table AGR_USERS to get the userid's "current" roles into an internal table. I also know the SU01 mode (create, change or delete).
The problem is being able to differentiate between an added role or a changed role while in SU01 change mode. For example, if I add role ABC the changed_role_itab has role ABC and the current_role_itab has role ABC. If I then change role ABC to have a valid from date of 5/19/2007, both of the internal tables will have role ABC with a valid from date of 5/19/2007.
I thought about looking at change documents but that may be too complicated. Any suggestions?
Thanks,
Brad

Hi Brad,
I have a workaround for you. In the user exit do as following...
Delcare a internal table withe structure AGR_DEFINE
example : data: t_agr_define type agr_define occurs 0 with header line.
now read the role information from the database table ( This would have old values since you have not changed yet inSU01).
select * from agr_fine into t_agr_define where agr_name = <rolename.
Now you will have old value to be compared with another internal table current_role_itab.
Reward points if its helpful.

Role composition for ESS to display only own data.

Hi all,
I am trying to compose a role for Employee Self Service for employees to display their payroll, but i couldn't manage to structure it to display only their own personnel data. I had to put the personnel area in P_ORGIN however in that case they become authorised to display all employees' data in that personnel area. Can i use P_PERNR object for this operation? Please advise.
Regards,
Sezin

You can give I in PSIGN field for the infotypes that you want to 'Include' for an employee, and E in PSIGN field for the infotypes that you want to 'Exclude' for an employee.
Whether those Infotypes will be Read or Maintain will be dependent on the value in the AUTHC field.
Hope this helps.
Regards,
Vikas

Perhaps novice Q: multiple devices/accounts, versus single Mac

My family members have multiple ipads, iphones etc, and separate itunes accounts. we are in process of consolidating PCs/Macs etc, such that we may only have one main household Mac. Can one Mac support syncing/updates etc across mulipe devices & accounts, whilst keeping accounts & libraries independant?
i have tried and failed miserably. i suspect i am missing something obvious any advice?

Well it seems like the first thing you should do is consolidate your iTunes libraries so that you don't have 4 copies of everything, one for each user logged in to your Mac Mini. How you do that is consolidate all 4 iTunes folders to one folder located in the /Users/Shared/ folder and update each of your iTunes to point to that folder accordingly. That way you have one iTunes library, only one copy of your media, but accessible from multiple users.
One caveat is that if somebody is logged on and has iTunes open, you can't fast switch to another user and open iTunes. Apple made it so that only one user and one instance of iTunes can open a iTunes library at a time.
For your iTunes match situation, it does sound like you would be much better off sharing a single Apple ID with one iTunes Match. For consolidating, make sure you have everything everybody has shared via Home Sharing to the main account you'd like to move over to, and then simply go to each device Settings, Store, and the sign out of the original Apple ID and logon using the shared main Apple ID. I just looked at it and the automatic downloading is already live in iOS! You can specify if you want to do music, apps, and books separately in case you may want to automatically download music but not apps or books.

Srm role + iview customization

I am working on SRM 4. I am new to SAP.
I need to customixze the iviews like change the label of one or two fiels , or delete some fields. How am i supposed to do that? do I have to import the epa file in the
NWDS and then modidy the code in web - dynpro or Java persepective or in ABAP.
Can anyone please help me as to how to proceed on this issue.

First, you should try to talk your users into using the software as it was intended to be used - why are they deleting and changing fields? SAP delivers software and business process, and if you deviate too much from what they deliver you will run into problems later.
OK, can't I be an optimist at the start of a new year?
You might try modifying the BusinessHTML using transactio se80 -> Internet Services
Of course you'll have to located the service in question. Try going to the screen in question (using internet explorer), right click, view source, and upon investigation you'll find the appropriate service name. This is the file you will need to edit in se80.
Once you make your changes, you will need to publish these servicse back to your ITS server.
You should also have a discussion with someone in charge and tell them "we're going to need a place to back up the old ITS server templates" since these are not typically a part of a transport or CTS process you will need to create your own.
I hope this helps -
Best, Jim Stewart

SRM Roles - Composite versus Single

Similar Messages

Maybe you are looking for