Whay can't you assign a composite role to another composite
role ? Need clear explaintion.
Answers were Sorted based on User's Feedback
Answer / gaurav.s
Guys you were wrong..a single role without a profile can
also be assigned to a composite role.Basavaraj, i was
looking for a technical reason for this behaviour. Well i
have explore it myself and the correct answer is :
What prevents you from adding a composite into a composite
is that within PFCG is a validation provided through
Function Module PGRN_CHECK_COLLECTIVE_AGR. That FM checks a
few things, one of which being that for the inserted role,
it is not a collective (composite) role defined
via table AGR_FLAGS field COLL_AGR=X.
Join SAP Security Group on Facebook :
https://www.facebook.com/groups/sapsecindia/
Is This Answer Correct ? | 8 Yes | 0 No |
Answer / basavaraj
composite roles are created for a particular module/group.
we cant pute one module/group into another module/group.
Is This Answer Correct ? | 0 Yes | 6 No |
Can you explain document transfer-level security?
how we Created over 120 customized end user roles and menus.
how we Completely designed and implemented methodology for controlling end user access to plants, cost centers, etc. and how we Applied to both R/3 and BW environments.
What are the different types of sap security tables?
how to add abap role to portal users?
How many maximum profiles we can assign to one user?
What's the basic difference in between SU22 & SU24?
What do you mean by SOX and Gxp?
What are the critical tables in BI Security
What is the name of background job in FF that is responsible for sending notification and logs to FF id controller ?
What is t code?
what are the prerequisites we should take before assigning sap_all to a user even we have approval from authorization controllers ?