Skip to Content
author's profile photo Former Member
Former Member

why derived roe?

hi all

i am ramesh, i have a doubt for so many days. that is in which kind of environment we use derived role?

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

5 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Feb 24, 2007 at 07:09 AM

    In general it is best suitable for large companies especially when a lot of BG's or countries with specific OrgLevel needs are involved, Maintenance wise it save

    s a lot of time. Hope this answers your question?

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Feb 24, 2007 at 10:57 AM

    Hi ramesh,

    I hope this example will clarify your doubt.

    xxx organization maitainning different plants on diffrent locations like birla cement having plants on entaire india.

    For each plant maintanence thay required manager.

    Managers roles will be same but plants numbers are diffrent.

    We can create a role and we derive n number of roles differ by the organization levels(plant no's).

    i hope it will help you.

    kiran kumar.v

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Feb 26, 2007 at 09:36 AM

    Say in ur organization

    There is a role with some tasks. Now these are 10 distinct locations with the same activity but since they are distinct so they will have different Organizational Level values...

    If you were to create Separate single roles then u needs to create 10 different roles. further going forward if there are another 10 distinct entitiies being added then u have to again go for another ten and so on. And also to make common change acroos all the roles then u need to modify each role separately. To overcome this inefficinecy in role maintainence SAP has come up with Master Derived Roles.

    In this new approach u built one Master Template(master role) and make others copies of this role with only the Org Level field values being different. This reduces the administration of the roles and easy to maintain and monitor and extend going forward with addition of new tasks and org levels...

    This is where Derived roles come handy...

    hope this helpss...

    Cheers

    Manohar

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Feb 26, 2007 at 10:51 AM

    Hi ramesh kaluri

    Derived roles refer to roles that already exist. The derived roles inherit the menu structure and the functions included (transactions, reports, Web links, and so on) from the role referenced. A role can only inherit menus and functions if no transaction codes have been assigned to it before.

    The higher-level role passes on its authorizations to the derived role as default values which can be changed afterwards. Organizational level definitions are not passed on. They must be created anew in the inheriting role. User assignments are not passed on either.

    Derived roles are an elegant way of maintaining roles that do not differ in their functionality (identical menus and identical transactions) but have different characteristics with regard to the organizational level.

    The menus passed on cannot be changed in the derived roles. Menu maintenance takes place exclusively in the role that passes on its values. Any changes immediately affect all inheriting roles.

    You can remove the inheritance relationship, but afterwards the inheriting role is treated like any other normal role. Once a relationship is removed, it cannot be established again.

    Thanks & Regards

    Pankaj Kumar

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Feb 27, 2007 at 04:57 AM

    Also remember, once user assigned to composite role, he will get access to all the child roles and the respective access.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.