There are two possible reasons for deriving a role from an existing role:

• The role menus are identical but the authorizations for the menu actions are different in the derived role.

• The menu and authorizations of the derived role are identical, but the organizational levels are different in the derived role.

Roles derived from another cannot have any additional menu entries.

To create a reference to another role:

1. Create a role.
2. Enter a role description text.
3. Enter the name of the role from which all transactions including the menu structure are to be copied in the Derive from role field in the Description tab.

When you save, you have created a role whose menu is derived from another role.

To copy the authorizations to the derived role:

1. Change the role from which the authorizations are to be derived, in the role maintenance. Choose the Authorizations tab and the Change authorization data pushbutton.
2. Choose the menu entry Authorizations ® Adjust derived ® Generate derived roles.

You need complete authorization for the authorization object S_USER_VAL and change authorization for the derived roles to adjust the authorization data of derived roles.

To delete the inheritance relationship between two roles, choose the Delete inheritance relationship pushbutton in the Description tab.

You can display an overview of the inheritance of roles by choosing Role ® Where-used list. You can go to another role by double-click.