Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

How to inherit roles between root organization unit and sub units

marcin_cholewczuk
Active Contributor
0 Kudos

Hi all,

I have root organization unit and sub units:

->Company

-


>Department 1

-


>Department 2

-


>Department 3

-


>Department 4

-


>Department 5

I would like it to work like this that all people from all departments would have access to transaction ZTEST. Most obvious way would be for me to assign appropriate role to unit Company. Unfortunately it looks like roles are not inherit between units like this. So question is how it should be done? Do I have to assign this role to all departments to make it work?

Best regards

Marcin Cholewczuk

1 ACCEPTED SOLUTION

Former Member
0 Kudos

I faintly suspect you are refering to indirect role assignment via Organization Management here?

Perhaps you want to rephrase your question with more details?

Cheers,

Julius

5 REPLIES 5

Bernhard_SAP
Employee
Employee
0 Kudos

Hello Marcin,

inheritation bases on authorization field level. So first you have to identify the authoriaztion object(s) which protect the function(s), then you can identify, if a field protects the 'units' you mentioned. If you found fitting ones, you can check, if they are org.level fields. if not you can convert them to orglevel fields with reprot pfcg_orgfield_create.

After that you can use the derived role concept as per help.sap.com.

b.rgds, bernhard

Former Member
0 Kudos

I faintly suspect you are refering to indirect role assignment via Organization Management here?

Perhaps you want to rephrase your question with more details?

Cheers,

Julius

0 Kudos

Hello,

Yes Julius, you're 100% right. With organization unit I meant use of organization unit (and also jobs and positions) by indirect role assignment via Organization Management. Sorry for not being accurate.

Just to make sure - Company is root unit and all depratments are it's sub units.

Best regards

Marcin Cholewczuk

0 Kudos

Hi,

To activate inheritance of roles between root org and sub org units, you need to set switch HR_ORG_ACTIVE to Yes in table PRGN_CUST. Also proper evaluation path has to be used so that user comparison (via PFUD) creates the indirect role assignment to user master records.

You can modify evaluation path US_ACTGR in table T77AW/ tcode OOAW to include root org and its subunits (add entry for relationship O B002 O) and connect the role assigned to root org to the users belonging to sub org units. Then run PFUD which will use this evaluation path to create indirect role assigment.

Thanks

Sandipan

0 Kudos

Hi Sandipan,

I've just realized how little I know about SAP. This exactly what I was looking for. Thank you very much!

Best regards

Marcin Cholewczuk