Master Derived role concept

[snehal54321]

Master role-It is parent role which has full access and contains org level values as *.

Derived role-It is a single role which is derived from another single role.

What is the necessity of a derived role?

->when the client is MNC--Coke, BMW, NESTLE

->Multiple business company-TATA

For Example-

Coke:

India finance team-India finance team will process the invoices of India.

USA finance team-USA finance team will process the invoices of USA.

t-code used to process the invoices is same FBV0.

In India when they will execute the FBV0, they should be able to process the invoices of India only.

In USA when they will execute the FBV0, they should be able to process the invoices of USA only.

This access can be differentiated with the ORG FIELDS. i.e. plant, cost Centre, company code.

In this diagram, three roles are derived from master role.

When you derive the roles from master role the t-codes, authorization objects will get derived as it is.

The only difference between master and derived role is ORG FIELD values. i.e. company code values in this example.

Here, we have created master role with company code value as * and we have derived derive role for India, USA,UK with company code value as 100,200,300.Suppose if we add a new t-code to master role and if we create derive role from it, it will push the t-code to India, USA, UK role, but it will not touch the company code value of derive roles. The company code value will remain as it is. That is the concept of Master and derive role.

If you want to add a new t-code FB01 in these three derived roles, then you need to add this t-code to master role and derived roles will get modified accordingly.

Q&A:

What is the difference between master and derived roles?

->org values.

How many derived roles can be derived from one master role? Is there any limit?

->No limit. It depends on how many branches or businesses the company has.

Regards,

Snehal