Tuesday, November 25, 2008

Definition of Single and Composite Roles

Single Role

A Single Role represents a grouping of activities.  More specifically, a Single Role within SAP represents a collection of SAP transactions that are routinely performed together or are affiliated in some way.  

Transaction: 

A transaction represents an activity performed by an individual(s) in support of their day-to-day responsibilities.  Within the SAP R/3 environment a transaction represents a series of related steps required to perform a certain task.  Transactions within SAP are typically identified by a unique four-character code (although some are longer).  Examples of SAP Transactions include:

 

Transaction Code  Transaction Code Description

F-02                            Enter G/L Account Posting

FB03                          Display Document

FD03                          Display Customer

MM02                         Change Material

MM03                         Display Material

VA01                          Create Sales Order

VA03                          Display Sales Order

 

Composite Role

A Composite Role can be defined either logical or virtual.  It represents a grouping of Single Roles.  Each composite role will include all activities an individual requires to perform their job function. This approach provides the ability to explicitly identify and evaluate segregation of duty issues in order to manage the associated risk.  Composite roles will be defined as broad as possible without jeopardizing any audit or controls issues so that many users can be placed into as few business roles as possible.

Composite Roles can be roughly associated with an individual’s job title

 

Selva Kumar 
OneAccess-UserManager for SAP
 
SAP Certified- Powered by Netweaver
 
http://www.softsquare.biz/oneaccess/ 
selva@
 softsquare.biz 
Phone: 877 717 5487

Automate and Meditate

No comments: