Skip to Content
avatar image
Former Member

Role Expert Single, Derived, Composite Role generation

We are planning to use Role Expert for Single, Derived and Composite role generation.

Is there any specific change related to Role Expert that i need to be aware of.

1. If I generate the Composite role, will it automatically generate all the single roles associated with it?

2. Should user compare, be run for the roles generated by Role Expert?

3.Should I continue to use transports after using generating in dev using RE, or use RE landscape to move the role from Dev to Quality and Prod?

4. Can authorizations and org values be done from PFCG and synced, or org values need to be maintained only in RE?

Please let me know, anything else, i need to be aware of.

Thanks

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Best Answer
    avatar image
    Former Member
    Oct 23, 2008 at 09:29 AM

    Hello Prakash,

    1. If I generate the Composite role, will it automatically generate all the single roles associated with it?

    Since Composite roles are not generetaed if they have ungenerated single roles, Generate Single first and then only you would be able to generate the composite role. Thus the answer to your question is NO

    2. Should user compare, be run for the roles generated by Role Expert?

    Could you please explain what exactly you mean by this question. Not getting properly wat you want to ask. Role expert is just concerned with creating the role. Assignemt and user compare activities are done by AE or simply at the backend.

    3.Should I continue to use transports after using generating in dev using RE, or use RE landscape to move the role from Dev to Quality and Prod?

    You should use the transports to move the role from Dev to QAS to PRD. i.e generate the role in DEV from RE and then go ahead to Q and to P from CTS.

    4. Can authorizations and org values be done from PFCG and synced, or org values need to be maintained only in RE?

    You can do it both ways, but if you have RE running, you should ideally use RE for this. Else the process would get unnecessarily complicated for you to manage.

    Regards,

    Hersh.

    Add comment
    10|10000 characters needed characters exceeded