This website is not affiliated with, sponsored by, or approved by SAP AG.

Rloe Creation in the SAP template process

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Rloe Creation in the SAP template process

Postby CMB2012 » Thu Feb 16, 2012 5:33 am

Hello,

Our Company is a subsidiary co. of a German based MNC Co. who have a global presence in Europe, America & Asia.

Our compnay is the first subsidiary Co. for roll out of SAP templet process and later on the same templet process has been rolled out in America & Asia. Our MNC co. has trageted to rolled out the same templet process for all the subsidiary Co. globally.

Under the global template process, presently, we are using the SAP standard roles and user specific roles for the transactions authorisation.

We being a subsidiary co., developing the Role based transaction authorisation matrix and would like to define the same in Global SAP Template.

Questions:

1. Being a SAP global templet process, whether this new role based trasaction authorisation roles can be define for our subsidiary Company in the templet?
2. If , the answer is no what is the alternative remedy.

We would be glade to know the answer.
Thanx & Regards
CMB2012
 
Posts: 5
Joined: Fri Feb 10, 2012 12:44 am

Re: Rloe Creation in the SAP template process

Postby Al. » Fri Feb 17, 2012 7:03 am

Hi,

If you are developing a "global" template of config, processes (in SAP and not in SAP), developments etc then you need to support that with a template role build that supports those processes.

To be honest it sounds like the role build is starting too late. As a subsidiary you should be implementing a pre-defined template that supports all of the above. If you are not happy with what has been done before (and I would not be happy using SAP standard roles) then you could take this opportunity to use your subsidiary implementation to develop a template. If you do this then you need to be very sure that you develop roles which meet the template and not just your local requirements. This will mean a lot of working with the central team. It will mean more work for your implementation but do it properly and it will be a lot less work across the programme when it hits the other subsidiaries.

Cheers,
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3050
Joined: Tue Feb 25, 2003 5:35 am
Location: London

Re: Rloe Creation in the SAP template process

Postby CMB2012 » Tue Feb 21, 2012 2:16 am

Hello AI,
Thanks for the reply.

Further, in SAP Golbal templet process whether it is possible to create addtional roles apart from the standard roles, for our subsidiary Co. with a prifx of country and same can be used by our Co. users. If possible whether it will have any problem with SAP templet process.

With Regards,
CMB2012
CMB2012
 
Posts: 5
Joined: Fri Feb 10, 2012 12:44 am

Re: Rloe Creation in the SAP template process

Postby Al. » Tue Feb 21, 2012 2:47 am

Hi,

Most templates will have a provision for localisations. If they haven't done this then you need to make sure that they do.

Generally they do what you have suggested - allow local roles to be created in a local namespace (e.g. country prefix). One word of caution I would advise is that local roles should only be created to cover additional functionality or processes which are not delivered as part of the template. Do not create local roles to provide access to template functionality

I am still concerned the SAP standard roles are being used. This will give much more access than required and cause issues with people executing business processes in a manner in which they were not designed.
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3050
Joined: Tue Feb 25, 2003 5:35 am
Location: London

Re: Rloe Creation in the SAP template process

Postby CMB2012 » Tue Feb 21, 2012 3:27 am

Hello AI,

Thanks for your quick response
CMB2012
 
Posts: 5
Joined: Fri Feb 10, 2012 12:44 am


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 7 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.