Answer / gaurav.s

Guys you were wrong..a single role without a profile can
also be assigned to a composite role.Basavaraj, i was
looking for a technical reason for this behaviour. Well i
have explore it myself and the correct answer is :

What prevents you from adding a composite into a composite
is that within PFCG is a validation provided through
Function Module PGRN_CHECK_COLLECTIVE_AGR. That FM checks a
few things, one of which being that for the inserted role,
it is not a collective (composite) role defined
via table AGR_FLAGS field COLL_AGR=X.

Join SAP Security Group on Facebook :
https://www.facebook.com/groups/sapsecindia/

Answer / sandy

Because composite roles does not have profile.

Answer / basavaraj

composite roles are created for a particular module/group.
we cant pute one module/group into another module/group.

what is difference between se16N and sm31?

2 Answers   Patni,

---

Can you explain document transfer-level security?

0 Answers  

---

What does the account assessment category specify in a purchasing document in SAP Materials Management?

0 Answers  

---

Please let me know if there any vacancies for 3 years of Experienced level in SAP Security

0 Answers  

---

Security admin kept trace on a user.But while analyzing it is showing that "zero records" found.Then what to do?

4 Answers   Cognizant,

---

What is the maximum number of profiles in a role and maximum number of object in a role?

0 Answers  

---

Which tables will you use for making customizing setting for security administration?

0 Answers  

---

Is it every login FFID notification goes to controller?

2 Answers   TCS,

---

What is use of Licence Data tab in SU01 ? and they have types like CAT-II,CAT-III,CAT-IV what is its use then ? Is there any difference between these ?

5 Answers   Patni,

---

What are su22 t-codes used for?

0 Answers  

---

what is sox and in sap security?

2 Answers   IBM,

---

In which scenario we use SUPC

2 Answers   HCL,

---