cancel
Showing results for 
Search instead for 
Did you mean: 

Differences between Composite Role and Business Role

Former Member
0 Kudos

Hi Experts,

Can anyone please explain me what's the technical difference between a Composite Role and a Business Role.

As far as my understanding:

# we can add one or more single role in a composite role and one or more Single Role (composite and Business roles) in a business role.

# Also, Business Role is a concept that exists in front end whereas composite role is a concept of R/3.

Best Regards,

Vinay Kumar

Accepted Solutions (1)

Accepted Solutions (1)

Colleen
Advisor
Advisor
0 Kudos

Hi Vinay

Composite role is a SAP technical role (one you could build in PFCG). It can only have single roles in the it that belong to the same system/connector group.

Business roles exist in the GRC repository only and were with the intention that they could be business friendly language and represent job positions. The have roles assigned - sigle, composite, etc and can be multiple systems.

SAP published the following KT article: OSS Note 1805220  - Difference between a Business and Composite Role

Answers (1)

Answers (1)

former_member183818
Contributor

Dear Vinay,

A composite role is a container which can collect several different roles. For reasons of clarity, it does not make sense and is therefore not allowed to add composite roles to composite roles. Composite roles are also called roles.


Composite roles do not contain authorization data. If you want to change the authorizations (that are represented by a composite role), you must maintain the data for each role of the composite role.


Creating composite roles makes sense if some of your employees need authorizations from several roles. Instead of adding each user separately to each role required, you can set up a composite role and assign the users to that group.


The users assigned to a composite role are automatically assigned to the corresponding (elementary) roles during comparison.

Business Role

A Business Role can be a person or machine. One person can be member of multiple business roles (e.g. Sales manager and Employee), and multiple persons can be member of the same business role

The business role is the one that launches a process, makes decisions on which of the available paths in the process to take and in the end finishes the process.