Answer / gaurav.s

Guys you were wrong..a single role without a profile can
also be assigned to a composite role.Basavaraj, i was
looking for a technical reason for this behaviour. Well i
have explore it myself and the correct answer is :

What prevents you from adding a composite into a composite
is that within PFCG is a validation provided through
Function Module PGRN_CHECK_COLLECTIVE_AGR. That FM checks a
few things, one of which being that for the inserted role,
it is not a collective (composite) role defined
via table AGR_FLAGS field COLL_AGR=X.

Join SAP Security Group on Facebook :
https://www.facebook.com/groups/sapsecindia/

Answer / sandy

Because composite roles does not have profile.

Answer / basavaraj

composite roles are created for a particular module/group.
we cant pute one module/group into another module/group.

What is the use of usergroup in logon data tab?

3 Answers  

---

I want to lock all the users except sap* and DDIC of a particular client ?

4 Answers   IBM,

---

You want to force a user to change their password. How would you do it?

2 Answers  

---

what is analysis authorization in sap bi and how to create analysis authorization in sap bi?

0 Answers   TCS,

---

one tcode,say sa38, is assigned to 10 diffrent users through a same role.I want to restrict one of those 10 users to execute only a few reports in sa38 but not all reports.what are the possible ways of getting it done?

3 Answers   Cap Gemini,

---

SU25 Step6 How Roles are created through Profiles?

2 Answers   IBM,

---

How to find list of roles which are not assigned to any user

1 Answers   Wipro,

---

what is SOD?

3 Answers   IBM,

---

why we should not check " Generate automatically " option in SUPC?

2 Answers   HP,

---

what is central user administration?

1 Answers  

---

Can you explain network topology in sap systems?

0 Answers  

---

What do you mean by User Buffer? How it works with the user's Authorizations?

6 Answers   Satyam,

---