Site icon SAP Human Resources Experts And Solutions

Automatic PFCG roles assignment

<p>There is a magic tool in the system that allows you to assign PFCG roles based on organization position&period; It means we can use org chart to say what roles and structure profiles to assign to users who holds that position&period; Let&&num;8217&semi;s say for HR department we can assign role &&num;8220&semi;HR Manager&&num;8221&semi; and ALL structure profile&period; WHen somebody moves to HR department system will automatically assign that role and profile to him&period; The same if somebody leaves HR department role and profile will be revoked&period; There is no need to call IT to grant&sol;revoke access&period; This is old mechanism&comma; not very flexible&comma; bo SOD control&comma; but it works&period; New solution is SAP GRC&period;<&sol;p>&NewLine;<p><&excl;--more--><&sol;p>&NewLine;<p>To assign role automatically and create a user we need to perform some steps&colon;<&sol;p>&NewLine;<ul>&NewLine;<li>User name in infotype 0105 for personnel number who will be assigned to a position with role assignment<&sol;li>&NewLine;<li>PFCG roles in infotype 1016 for O&sol;S&sol;C objects in orgchart<&sol;li>&NewLine;<li>Structure authorization profile in infotype 1017 in orgchart<&sol;li>&NewLine;<li>Run program RHPROFL0<&sol;li>&NewLine;<&sol;ul>&NewLine;

Exit mobile version