05-22-2008 7:15 PM
Hello - we are implementing the HR module OM, PA and TA
Basically, our HR security model is very very simple. We need 2 HR Roles: one for HR and one for IT. The HR Roles will have all HR functionality with no screen restriction with a total of 4 users. The IT Role will have the same access level as the HR Role minus several infotypes.
I've been looking on how the roles are created for HR and there are so many choices. Not including SAP_ALL is there one(or several) all encompassing HR Roles that will give the HR users access to everything in the HR module?
The HR IT role would be everything HR Role is minus the infotypes.
thanks.
06-11-2008 12:37 PM
Wow, you dont have an easy task on your hand.
There are many ways of creating roles.
You can start by looking at a SAP-template which there are many in your SAP system.
Check in PFCG after roles starting with SAP_HR*.
But the best way is to talk to the functional SAP consultants and ask them which transactions the end users are to be using. Then you add these into a role and assign.
Another way is to create a blank role and create a role from the SAP menu, this way you will get a 80% correct role and you have to add a lot more to make it working, but it is a quick start!
Good luck!
Fredrik