Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Master role and derived roles

Former Member
0 Kudos

Hi Friends ,

We have master and drive role concept in our project .ZABC_XXX (Master role ) ZABC_0001(Derived role) (001= company code)

In Master role company code XXX stands 000 (3 character) in all roles.In Derived roles company code maintained with actual one 0001(4 character).

Now we need to align master role with derived roles .

Have to create a new Master role with company code as four character ZABC_XXXX i,e 0000 for existing derived roles.

Is it possible to delete inheritance of existing Master role and can we add new master role to the derived roles or its possible only by creating all new derived roles and master role only?

Please suggest.

2 REPLIES 2

jurjen_heeck
Active Contributor
0 Kudos

Officially you can not but there may be a workaround which you can try (best do this on a sandbox client and/or with dummy roles first):

First copy your master role to the new naming convention and generate its profile.

Then, for each derived role do the following steps in PFCG (probably this can be automated with SECATT):

  1. Break the link with the parent.
  2. Save, the 'parent' field now turns into a read-only field, if the role menu is filled.
  3. Delete the entire role menu, this should make the 'parent' field writable again.
  4. Save.
  5. Create the link with the new parent.
  6. Save.
  7. Go into the profile with expert mode -> 'Edit old status'
  8. Click on the 'Copy Data' button
  9. Generate the profile

This set of actions should leave the organizational values as they were.

Hop this helps,

Jurjen

0 Kudos

there is no relationship between the org levels of derived and master roles. we should maintain org levels in derived role as specified by the company.

and one more thing i wnt to tell you, we can delete the inheritance relationship in description tab.