Parent - Derived Roles concept

[nishanth_chinthala2]

What are the Scenarios in which "Generate derived Roles" Tab in Master Role will be greyed out

[Janek_Niefeldt]

The "Generate derived roles" button only appears in PFCG if you maintain/display a master role. If the button is not available and the menu entry under "Authorizations >> Adjust derived >> Generate derived roles" is grayed out, this most likely means you are not in a master role.

Missing authorizations (e.g. no change access for the derived roles via S_USER_AGR) should not be the root cause since you would get an according error message once you click the generate derived roles button.

To confirm that you are indeed in a master role, go back to the Role screen and check the inheritance hierarchy (Role >> Inheritance (Ctrl + Shift + F3)).

[nishanth_chinthala2]

Janek, Thanks.

But I am looking for a Scenario where ""Generate derived roles" is available in the Role, perfectly it is a Master one but still grayed out and unable to derive the Child Roles.

[jurjen_heeck]

Have you tried to go into one of the child roles' authorizations and synchronise the data from there? Maybe dat will give more clear messages?

[former_member612251]

I'm not sure I get this question? Where does it say generate derive role? To create a derived role, you create a new single role, then in this single you place the Master role name in the description and then generate the derive role from there.

To my knowledge the only time you would be able is if you are already in a derived role, you cant derive a derive role from a derived role.

The generate derived role could be greyed out if you are in any other environment but DEV.