Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Org data in Derived role differ from Parent role

Former Member
0 Kudos

Hi there

I need some help please, I am in the process of creating various parent / derived roles and have found that when I update the parent role (org data) and I do a generate do a derived role update the values in the org data is not correctly pulled through to the derived roles.

e.g.

In the parent role for Org data "Purchase Org" the previous value was "/" so that it could be specified in the derived roles should they require the split on this field, however the business has decided that they do not require a restriction on this field so I went back to the parent role and changed the value to "*", so I generated the parent role, updated the derived roles, but when I go to any of my derived roles that field value is still blank, it did not pull through the value * .

We are currently on

SAP_ABA 701 0005 SAPKA70105

SAP_BASIS 701 0005 SAPKB70105

I have created the derived roles with the parent role as the derived from role, it does pull through the values but just does not update it once I do make changes.

Your help / suggestions would really be appreciated as I need to create MANY roles.

Regards

Sonja

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Hi Sonja

It seems that you are not doing a Generate--> Adjust derived for the derived roles. Once you have created the derived role and saved it, you need to go back to the parent role and Go to Authrizations tab --> Change Authrization data --> Authrizations(Menu bar) --> Adjust Derived --> Generate Derived roles.

However after the first time you would need to maintain the organisation values in derived roles individually.

Hope this helps.

Thanks.

Anjan

8 REPLIES 8

Former Member
0 Kudos

HI Sonja Pretorius,

Parent role and Derived role concept itself is like that, you have to maintain all Org. value in Child role (derived role) not in Parent role.

In your case you have to change all Child roles (derived roles) whever Purchase Org. value is available.

I hope you understood.

Regards,

Firoz.

Former Member
0 Kudos

Hi Sonja

It seems that you are not doing a Generate--> Adjust derived for the derived roles. Once you have created the derived role and saved it, you need to go back to the parent role and Go to Authrizations tab --> Change Authrization data --> Authrizations(Menu bar) --> Adjust Derived --> Generate Derived roles.

However after the first time you would need to maintain the organisation values in derived roles individually.

Hope this helps.

Thanks.

Anjan

0 Kudos

Thanks guys for the feedback, but surely I do not only need to maintain the ORG data in the derived roles individually, if I have got an Org field that should be the same for all the derived roles I must be able to update the Parent role with this value which then upon generate, and generate / activate the derived roles must update the derived roles.

That part is not happening, I have updated my Parent role to cater for all my derived roles to have the same Purchase group value as everyone must have access to all Purchase groups, but when I changed the value in my parent role, it does not update any of my derived roles and the BIG problem is I have got 300 derived roles, so it should in theory update all 300 roles.

Yes I have executed the update derived roles but still no changes found in the derived roles.

I am pretty sure this was happening with my previous release but for some reason it is not happening now, or am I mistaken?

Regards

Sonja

0 Kudos

Hi,

Org values in derived roles are not updated "if values are maintained in the derived role" If you generate a derived role with out mentioning org values in child/derived role then it will populate them.

The only option I see here is "you need to maintain each derived role" there are some mass maintainance options covered in the forum. Please search.

Check the [link|] for mass update options

Regards,

Gowrinadh

Edited by: Gowrinadh Challagundla on May 11, 2010 10:50 AM

0 Kudos

Hi Sonja,

obviously there is a misunderstanding of how the derivation works....

> Thanks guys for the feedback, but surely I do not only need to maintain the ORG data in the derived roles individually, if I have got an Org field that should be the same for all the derived roles I must be able to update the Parent role with this value which then upon generate, and generate / activate the derived roles must update the derived roles.

-->no.

Only the first time of derivation, if the field content in the derived roles are initial...

help.sap.com:

quote

The organization level data is only copied the first time the authorization data is adjusted for the derived role. If data is maintained for the organizational levels in the derived role, and if you have maintained the organizational levels using the dialog box, the data is not overwritten by another conciliation (See SAP Note 314513).

unquote

The whole stuff: http://help.sap.com/saphelp_nw70ehp2/helpdata/en/1c/c38028816c11d396bc0000e82de14a/frameset.htm

otherwise the maintained org.fieldvalues would get overwritten by the value of the master role every time. And that is exactly, what has to be avoided!

b.rgds, Bernhard

0 Kudos

Dear Sonja,

The parent -derived role is the concept, where everything but without organizational values, all othe values get copies to derived

role from parent role. To update the orgnizationl values in derived role you have to go manually and update.

Like in above in if you want to keep purchasing group, with same as parent role, then you need to update derived role individullay.

Regards,

Sneha

0 Kudos

Thank you to everyone that has replied, I really appreciate your answers.

It does not make my life easier for when at a later stage some of the ORG DATA does change then all the derived roles would have to be updated individually even though it is with the value *, and it is not that we do not have a lot of roles, we have got 500 derived roles per role, so I had just hoped that somewhere it would be possible to update data (ORG DATA) to all derived roles after the initial generation, which looks impossible.

Take care and have a super day for you guys.

Cheers until the next time.

Sonja

0 Kudos

Sonja,

for such exceptional cases you can use the 'problematic' function for org.level fields. Simply maintain the field value in the master role not by the org.level popup, but directly (with the pencil). The field looses then its special status, and the field value will overwrite the field values of the derived roles.....

If you want to reset the statuses, you will have to delete those values then in every role with the dustin icon. the field is then an orgelvel field within the roles again.

b.rgds, Bernhard