Whay can't you assign a composite role to another composite
role ? Need clear explaintion.
Answers were Sorted based on User's Feedback
Answer / gaurav.s
Guys you were wrong..a single role without a profile can
also be assigned to a composite role.Basavaraj, i was
looking for a technical reason for this behaviour. Well i
have explore it myself and the correct answer is :
What prevents you from adding a composite into a composite
is that within PFCG is a validation provided through
Function Module PGRN_CHECK_COLLECTIVE_AGR. That FM checks a
few things, one of which being that for the inserted role,
it is not a collective (composite) role defined
via table AGR_FLAGS field COLL_AGR=X.
Join SAP Security Group on Facebook :
https://www.facebook.com/groups/sapsecindia/
Is This Answer Correct ? | 8 Yes | 0 No |
Answer / basavaraj
composite roles are created for a particular module/group.
we cant pute one module/group into another module/group.
Is This Answer Correct ? | 0 Yes | 6 No |
I have uploaded one role(its is derived role) from quality system to development system.After that, i have generated role and tried to move production. while transporting role i am getting below error ' ROLE TYPE IS UNDETERMINED ' can any body please provide the solution?
2 Answers British Council, CGI,
What is a derived role?
Differentiate between derived role and composite role
how we Restrict the auth groups for table maintain, creating Auth group using SE54 to built new Auth groups to restrict tables via auth object S_TABU_DIS
what is diff b/w su01 and su10?
How would you do the 'lock all users at once'.
How see hierarchies in BI security
How to run the daily background job s for virsa violations ? thabks in advance
When would you update a sap table directly?
When would you update a sap table directly? What precautions would you taje?
What is use of derived roles?
Explain internet-level security?