Skip to Content
avatar image
Former Member

Master role and derived roles

Hi Friends ,

We have master and drive role concept in our project .ZABC_XXX (Master role ) ZABC_0001(Derived role) (001= company code)

In Master role company code XXX stands 000 (3 character) in all roles.In Derived roles company code maintained with actual one 0001(4 character).

Now we need to align master role with derived roles .

Have to create a new Master role with company code as four character ZABC_XXXX i,e 0000 for existing derived roles.

Is it possible to delete inheritance of existing Master role and can we add new master role to the derived roles or its possible only by creating all new derived roles and master role only?

Please suggest.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Jul 25, 2017 at 04:54 PM

    Officially you can not but there may be a workaround which you can try (best do this on a sandbox client and/or with dummy roles first):

    First copy your master role to the new naming convention and generate its profile.

    Then, for each derived role do the following steps in PFCG (probably this can be automated with SECATT):

    1. Break the link with the parent.
    2. Save, the 'parent' field now turns into a read-only field, if the role menu is filled.
    3. Delete the entire role menu, this should make the 'parent' field writable again.
    4. Save.
    5. Create the link with the new parent.
    6. Save.
    7. Go into the profile with expert mode -> 'Edit old status'
    8. Click on the 'Copy Data' button
    9. Generate the profile

    This set of actions should leave the organizational values as they were.

    Hop this helps,

    Jurjen

    Add comment
    10|10000 characters needed characters exceeded