Hello,
I know this question looks like "deja vu" but I discovered recent SAP notes which propose some new classes to maintain some parts of the roles, so I ask the question again, and I hope to get more recent insights.
So. I'd like to maintain roles in background and use code supported by SAP as far as possible, or eventually not supported if the "risk" can be considered low. The risk is that it's not supported, creates invalid roles, and so on. In fact, I'm not even sure what is supported, what is not supported (the mention in SAP notes doesn't mean that customers can use it, my opinion is that only explicit declarations like "customers/clients can use it" can be trusted).
I fear big problems if I don't do the right choices because the topic concerns the security.
Up to now, I know that there are the following function modules and classes for the following topics:
Note: I think that GRC Enterprise Role Management (ex VIRSA Role Expert) calls PRGN_RFC_CREATE_ACTIVITY_GROUP (which calls PRGN_RFC_CREATE_AGR_MULTIPLE, PRGN_RFC_CHANGE_TRANSACTIONS and PRGN_AUTO_GENERATE_PROFILE_NEW), so there's a chance that this function module is supported or will have compatible substitutes in the future, but not what is inside.
Can you tell me what you think for all of these topics, what solution you would use or not use, or if there are other solutions?
Thanks for your time.
Sandra