Create Composite Roles  

Use

Composite roles can simplify the user administration.

They consist of roles. Users who are assigned to a composite role are automatically put in its roles when you compare. Composite roles do not themselves contain authorization data.

Composite roles are useful for example if some of your staff need authorization for several roles. You can create a composite role and assign the users to it instead of putting each user in each role.

Procedure

To create a composite role:

  1. Enter a name in the Role field in the role maintenance (transaction PFCG).

    2. The SAP System does not distinguish between the names of simple and composite roles. You should adopt your own naming convention to distinguish between simple and composite roles.

  2. Choose Create collective role.
  3. You can define the composite role in the following screen.
  4. Save your entries.
  5. Enter the roles in the composite role in the Roles tab. You can display all the simple roles in the system with the possible entries help.

    6. Composite roles cannot contain composite roles.

  6. You can restructure the role menus which you read in with Read menu, in the Menu tab. See Create roles.
    This does not affect the menus of the roles.

    7. The key in the Menu tab contains composite role menu notes.

  7. Either enter the names of the users individually in the User tab (manually or from the possible entries help) or choose Selection. You can define selection criteria (e.g. all users in a user group)

If you select a username and choose Display, detailed user information is displayed.

Choose Compare users. The user data is updated after the comparison.

Users which are assigned to a composite role are displayed on a gray background in its roles (not changeable). The user assignment should only be changed in the composite role.

You can display an overview of the roles in composite roles with Role hierarchy in composite roles in the role maintenance initial screen. You can select a role in the hierarchy display for editing by double-click.