Skip to Content
avatar image
Former Member

Objects missing when creating new role

Hi

I am creating a new role A by copying profiles of role B. But the new role A donot contain few of the objects that are present in the role A from which the profile is copied.

Please let me know what is the reason for such a strange issue.

Thanks and Regards,

Rajesh

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

4 Answers

  • avatar image
    Former Member
    Nov 05, 2008 at 11:38 PM

    My Advice would be make sure you copied all profiles.

    when you generate the profile in PFCG (in your case in role A), it creates profile name identical to first 10 character and than after 1-99 number assigned (SAP note 16466), more than one profile possible as one profile can contain only certain number of authorisation.

    Hence it is possible in your case that you miss some of them. That is why it is always best to copy role and not the profile and customized according to your need.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Okay... here is another possible explanation (I hope you have not given up yet to understand why this is happening):

      You are authorized to Display and Copy role A, but you are missing authority for object S_USER_VAL for those objects which are not included in role B.

      Check your own authority.

      Note that it might be that these objects (or specific values for them) have been restricted as there is no intention that they be used "just because they are copied" or "just because the trace said so"...

      There are some object like this, where it make sense in the authorization concept to prevent folks from making easy mistakes with objects they might not be familiar with but are important to keep the concept intact.

      Some examples are S_DEVELOP, S_ADMI_FCD, S_PATH, S_USER_GRP, etc etc... but there might also be very specific business objects like F_BKPF_KOA or P_ABAP or the "BI-all" objects, etc etc where this is a reasonable approach to take.

      Please tell us which objects are not copied accross. This will help to understand what the problem is, and advise about who to talk to (on your side) to understand what is going on with this role copy procedure.

      Cheers,

      Julius

  • avatar image
    Former Member
    Nov 04, 2008 at 01:22 PM

    hi Rajesh Nanda

    this is common in sap.u goto su53 respective user.check what are the objects missing.if u wont find su53 u can do with st0.by activating trace we can know why that objects are missed.i think st01 will help to u.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Give us an example or two of the names of these objects, and which release you are on.

      => Role A might be a really old one, and some object are now obsolete.

      Cheers,

      Julius

  • avatar image
    Former Member
    Nov 05, 2008 at 06:36 AM

    Hi Rajesh,

    The reason why the auth objs are missing is that : The auth objs may be manually entered in the parent role.

    Normally when you create a role you add tcodes in menu tab, so automatically the auth objects will be added. In case you add auth objects manually then these need to be added manually in the child role and are normally not copied in the child role when you copy the role.

    Best,

    Suchitra.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Sounds like a mess...

      > Now i am creating Role B by taking the profile of Role A and copying auuthorizations into role B.

      Are you sure? I understood that you either copied role A => role B, or (as later described) that you created role B and manually inserted the profiles of role A via the menu option to do this.

      Possibly you have not considered the fact that profiles have extended-profiles as well once they reach their (original) limits. From which table did you find the names of the profiles of role A?

      In my opinion, you got what you deserved whatever the cause may be... 😊

      Cheers,

      Julius

  • avatar image
    Former Member
    Nov 06, 2008 at 11:16 PM

    its becoz SU24 was chaged after role A was build, u need to inactivate the extra obj's or manually insert missing obj's

    Add comment
    10|10000 characters needed characters exceeded