Whay can't you assign a composite role to another composite
role ? Need clear explaintion.
Answers were Sorted based on User's Feedback
Answer / gaurav.s
Guys you were wrong..a single role without a profile can
also be assigned to a composite role.Basavaraj, i was
looking for a technical reason for this behaviour. Well i
have explore it myself and the correct answer is :
What prevents you from adding a composite into a composite
is that within PFCG is a validation provided through
Function Module PGRN_CHECK_COLLECTIVE_AGR. That FM checks a
few things, one of which being that for the inserted role,
it is not a collective (composite) role defined
via table AGR_FLAGS field COLL_AGR=X.
Join SAP Security Group on Facebook :
https://www.facebook.com/groups/sapsecindia/
Is This Answer Correct ? | 8 Yes | 0 No |
Answer / basavaraj
composite roles are created for a particular module/group.
we cant pute one module/group into another module/group.
Is This Answer Correct ? | 0 Yes | 6 No |
Can you explain document transfer-level security?
What are the different types of tabs that are present in the pfcg?
What is the differences between AGR_1251 and AGR_1252?
how to create new authorization object?
How to create a simple or single role.?
Could you please let me know the exact step by step process for the following Questions. 1.How to get the E-Mail address for 100 users at a time. 2.While Creating BW roles what are the Authorization Objects we will use. 3.While Creating Single role what will be happened in the functional side, when entered the Template role in the derived role tab. 4.when we changed the password for more users(for example:100 users) where the password will be stored or from where you can Re-Collect the password and how will you Communicate the password to all users at a time. 5.What is Virsa? Once you entered in to the screen what it will perform. 6.What is the use of SU24 & SM24. 7.While Creating BW roles what are the Authorization Objects we will use. 8.While Creating Single role what will be happened in the functional side, when you entered the Template role in the derived role tab. 9.What is Dialog users, Batch users and Communicate users. What is the use with Communicate user. 10.Can we add one Composite role in to another Composite role at any urgent user requests or in normal user requests. 11.In Transport what type of Request we will use.Why don't we use Workbench request in transport. 12.When we added Authorization Object in Template role, at the same time what will be happen in Derived role. 13.How to Check Profile parameter. And how to find whether any transport has ended with error and where we can check. 14.How to Extract users list like who didn't login since 3 months. And In 90 Days user Locking in which table we will use. 15.What is OSS Connection and System Opening and why we have to open these. 16.What will have in one single role and how many prifiles will be in one sap cua system. 17.What is the difference between Template role & Derive role.
Explain sap system transactions?
A user has roles that only give display access but he can still change something in the system. how?
Difference between SE01, SE10 & SE09?
what are ticketing tools?
What are some ap security t codes?
Providing training for SAP Security & GRC. SAP Security includes ECC Security,HR Security,SRM Security,CRM SECURITY,BI Security GRC 10.0 & 10.1 For further details send an email to sapsecuritygrc5.3@gmail.com or contact 971 563356167