Inheriting the menu from a reference user

[Former Member]

Hello,

transaction SU01, tab roles: no role assigned, only a reference user is assigned to the user <test-user>.

In this case "Menu - user menu" is disabled (it is grey in the session manager after login). The user <test-user> can not switch to the user menu, he has only the sap menu.

Is there a way to inherit the user menu from the reference user?

Thanks for any assistance,

Andy.

[Former Member]

Hi Andy,

It will be possible but not in the way you want. You can create user menu in SE43 and then assign that to the target user. But I think you already know about this option and don't want to use it

Regards.

Ruchit Khushu

[Former Member]

Hi Ruchit,

thank you for trying to help me.

You are right, the SE43 is not the way i want to solve the problem. In this case menu and roles would exist in parallel.

I would like to change a role including the menu of the reference user, so that these changes are rolled out to all users assigned to the reference user.

Thnks again,

Andy.

[Former Member]

Hello Andy,

I am moving your thread to the Security Forum.

Cheers,

Julius

[Former Member]

Hi Andy,

I looked around in the obvious places for a reference, but could not find anything related to this either.

But 2 thoughts did occur to me when reading it:

>

> In this case menu and roles would exist in parallel.

Why have the user and the role in parallel then?

>

> The user <test-user> can not switch to the user menu, he has only the sap menu.

If you only have 1 reference user and only intend ever using user menus, then there is only 1 SAP menu... (I have no experience with changing the SAP menu (only deleting changes to it) so there might be implications...?).

Actually, I don't recommend doing it (what happens if you want a second reference user for some other reason?).

So, actually, I have no ideas or help for you, but it is an interesting thought

Cheers,

Julius

[WolfgangJanzen]

Well, if a user has no roles assigned but only a reference user (and that reference user is assigned to roles) then it should be clear that the menu which is derived from the role information assigned to the reference user should be treated as read-only (same as the SAP menu).

Otherwise one user would be able to modify that menu, which would then have an impact on all other users which are assigned to the same reference user.

All that makes the logic more complicated. And I assume that this is the reason why such menu inheritance was not implemented - but that's only my personal opinion / speculation.

Cheers, Wolfgang

[WolfgangJanzen]

The reference user concept was designed only for the inheritence of authorizations (i.e. a user which is assigned to a reference user inherits all authorizations which are assigned to that reference user; such assignment can be done using roles and/or profiles).

Indeed, roles are not only containers for authorizations but also for menu items.

Well, I'm not sure whether it was not intended to inherit also other attributes (except authorizations) or whether that's a missing feature. Technically it would be possible to determine whether the current user is assigned to a reference user when displaying the "SAP Easy Access Menu".

Cheers, Wolfgang

[Former Member]

Hello all,

many thanks for your views and opinions.

I will wait a few days for possible solutions but i think, this functionality ist not implemented. It would be a good and, in my opinion, also a logical feature to roll out the menu and not only the rights of the reference user.

Thanks for the discussion,

Andy.

[former_member346212]

Update on this old topic :

Read the following OSS note (1947910) 1947910 - Affectation du menu utilisateur à l'aide de l'utilisateur de référence - SAP for Me

Table SSM_CUST

Add the entry => REFUS_EASY (value = YES)