S4HANA On Premise 1610 Backend Security Authorizations for SAP Fiori

[kmpartha]

What is the limitation for number of Single Roles that can be attached/tagged to Business Role.

[muttepawar-2009]

hi

We can attach n number of single roles to a single user.

We don't have any limit.Depends on her/his job role we can assign the roles

here is no restriction on the number of roles attached to a user.

but it is all ways, a good practice to create a composite role (which is a combination of single roles, & easy to maintain) and assing to User of similar type.

The below parameter can be checked for this topic. Infact the limit is about 9000 for this parameter and typically i have seen ID's in 4.7 environment with around 150 roles or more...

<b>Auth/auth_number_in_userbuffer</b>

When a user logs onto SAP, the authorizations contained in the user’s profiles are copied to a user buffer in memory. The maximum number of authorizations copied is set by this parameter. The size of the buffer must always exceed the maximum number of authorizations as authorization checks are made only against those in the buffer.

Refer to OSS notes 84209 and 75908 for more detailed information regarding changes to the size of the user buffer.

Transaction SU56 shows the contents of the user’s user buffer and a total for all the authorizations in a user master record.

he amount of single roles is 312

A user can have only up-to 312 profiles.....so you cannot add "N" number of roles in a composite role as if the profiles cross 312 in the composite role you cannot assign the role to the user......

regards

prashant