Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
Master And Derived RolesAlways first create the Master role and then add Derived roleCreate the Master Role :Enter PFCG in...
Go to Menu tab and enter the Tcodes
Go to Authorizations and click on Change Authorization data
Go to Utilities and click on Technical names onClick on the role and expandHere all the Open fields should be Zero and the...
Click on Save and Generate
Do not Assign Users from the User tab in Master Role .Always assign them from thederived rolesDerived Role Creation:Enter ...
Click on Menu and the Role is there
Go to Authorizations tab and click on Change Authorization data.
Maintain the Org level by clicking on the organization level tab and click on save
Click on Save and Generate
Go to User Tab and enter the Username and click on user Comparison.
The same way follow the above steps and create some more derived rolesBy entering the Master role in the derive from ro0le...
Now go to the derived roles and check the authorization information maintained
Scenario 2:Deletion of Master role from the derived roleEnter the Role in PFCG and Click on Delete Inheritance relationship
Now the derived role acts as a single role and it cannot be added to the Master role again
Derived master roles Configuration screenshots in SAP Security
Derived master roles Configuration screenshots in SAP Security
Derived master roles Configuration screenshots in SAP Security
Upcoming SlideShare
Loading in …5
×

Derived master roles Configuration screenshots in SAP Security

7,095 views

Published on

This Screen Shots as been created by one of the student who got trained from us(BharathTrainings),Hope This might help the new Aspirants while practicing the SAP Security Configurations.

Published in: Career
  • Be the first to comment

Derived master roles Configuration screenshots in SAP Security

  1. 1. Master And Derived RolesAlways first create the Master role and then add Derived roleCreate the Master Role :Enter PFCG in the Sap Easy Access ScreenEnter the Master Role Name and click on create role
  2. 2. Go to Menu tab and enter the Tcodes
  3. 3. Go to Authorizations and click on Change Authorization data
  4. 4. Go to Utilities and click on Technical names onClick on the role and expandHere all the Open fields should be Zero and there can be Un maintained Org levels
  5. 5. Click on Save and Generate
  6. 6. Do not Assign Users from the User tab in Master Role .Always assign them from thederived rolesDerived Role Creation:Enter the Role Name in PFCG and click on Create and enter the Master role in the Derivefrom Role
  7. 7. Click on Menu and the Role is there
  8. 8. Go to Authorizations tab and click on Change Authorization data.
  9. 9. Maintain the Org level by clicking on the organization level tab and click on save
  10. 10. Click on Save and Generate
  11. 11. Go to User Tab and enter the Username and click on user Comparison.
  12. 12. The same way follow the above steps and create some more derived rolesBy entering the Master role in the derive from ro0le in description screenNow after creating the derived roles enter the Master Role in the PFCG screen andClick on change iconGo to Authorizations tab and click on Change Authorization dataClick on the push button next to Generate icon to push the Authorization information toall the derived roles
  13. 13. Now go to the derived roles and check the authorization information maintained
  14. 14. Scenario 2:Deletion of Master role from the derived roleEnter the Role in PFCG and Click on Delete Inheritance relationship
  15. 15. Now the derived role acts as a single role and it cannot be added to the Master role again

×