Answer / gaurav.s

Guys you were wrong..a single role without a profile can
also be assigned to a composite role.Basavaraj, i was
looking for a technical reason for this behaviour. Well i
have explore it myself and the correct answer is :

What prevents you from adding a composite into a composite
is that within PFCG is a validation provided through
Function Module PGRN_CHECK_COLLECTIVE_AGR. That FM checks a
few things, one of which being that for the inserted role,
it is not a collective (composite) role defined
via table AGR_FLAGS field COLL_AGR=X.

Join SAP Security Group on Facebook :
https://www.facebook.com/groups/sapsecindia/

Answer / sandy

Because composite roles does not have profile.

Answer / basavaraj

composite roles are created for a particular module/group.
we cant pute one module/group into another module/group.

what does user compare do in sap security?

1 Answers  

---

What is the difference between ECC security and RAR security when GRC (RAR<SPM<CUP) is used, when similar functionality can be performed SAP R3 level(ECC)?

2 Answers   ADP, Baidu,

---

How to lock all the users at a time?

1 Answers  

---

how do we get list of users who are having mail-id’s in SU01 (Address tab)

4 Answers  

---

What is the benefits of ticketing tool?

1 Answers   IBM,

---

how to do Reporting and Analysis authorizations

0 Answers   IBM,

---

what is the use of start menu in defaults tab in su01 screen

2 Answers   CG,

---

Difference between User Group in "Logon data" and "Groups" tab in SU01

8 Answers   HP,

---

Any details about secatt apart from SAPSecurity online.com?

0 Answers  

---

What is a derived role?

1 Answers  

---

i am 43, can i get a job in SAP security at this age.

2 Answers  

---

what is role matrix

2 Answers   IBM,

---