<h2>How to maintain a huge number of permission roles in SAP?</h2>
<p>Have you ever maintained a huge number of permission roles in SAP systems? It&#8217;s a nightmare when you need to change dozens of roles to run a new personnel area or a plant. Clever boys in SAP have provided two really working solutions to us. <a href="http://saphcmsolutions.com/permission-roles-derivation-inheritance/">Permission roles inheritance</a> and organizational levels. <a href="http://saphcmsolutions.com/permission-roles-derivation-inheritance/">The first one</a> is explained in details here, while the second part is below for your convenience.</p>
<h2>Solution &#8211; Organizational Levels</h2>
<p><strong>Organisational levels</strong> are variables which could be filled centrally instead of filling up in each permission object manually. The organizational level is created in PFCG_ORGFIELD_CREATE report. Run it, fill with technical field name (like PERSK) you want to make available as org. level. If you made a mistake, run PFCG_ORGFIELD_DELETE report to delete. So you create an organizational level for PERSK field in the P_ORGIN object and can set it up within one window. It&#8217;s very convenient in HCM where you could have several P_ORGIN objects within a single role.</p>
<div id="attachment_2119" style="width: 1037px" class="wp-caption alignnone"><a href="http://saphr.ru/wp-content/uploads/pfcg_orglevel_1.png"><img aria-describedby="caption-attachment-2119" class="wp-image-2119 size-full" src="http://saphr.ru/wp-content/uploads/pfcg_orglevel_1.png" alt="Change role and authorization in PFCG transaction" width="1027" height="534" /></a><p id="caption-attachment-2119" class="wp-caption-text">Change role and authorization in PFCG transaction</p></div>
<p><!--more-->Below is a simple role with two objects.</p>
<div id="attachment_2120" style="width: 705px" class="wp-caption alignnone"><a href="http://saphr.ru/wp-content/uploads/pfcg_orglevel_2.png"><img aria-describedby="caption-attachment-2120" class="wp-image-2120 size-full" src="http://saphr.ru/wp-content/uploads/pfcg_orglevel_2.png" alt="Define Organizational Levels in SAP PFCG transaction" width="695" height="561" /></a><p id="caption-attachment-2120" class="wp-caption-text">Define Organizational Levels in SAP PFCG transaction</p></div>
<p>Open Goto ->; Organizational Levels.</p>
<p>As we see our new organizational level has appeared (by default PERSK is not a standard organizational level). Fill it with a new value and save.</p>
<div id="attachment_2121" style="width: 1003px" class="wp-caption alignnone"><a href="http://saphr.ru/wp-content/uploads/pfcg_orglevel_3.png"><img aria-describedby="caption-attachment-2121" class="wp-image-2121 size-full" src="http://saphr.ru/wp-content/uploads/pfcg_orglevel_3.png" alt="Example of Organizational Levels in SAP PFCG transaction" width="993" height="527" /></a><p id="caption-attachment-2121" class="wp-caption-text">Example of Organizational Levels in SAP PFCG transaction</p></div>
<p>Having done this we filled all P_ORGIN-PERSK fields in a role.</p>
<p>While working with permissions don&#8217;t forget to use <a href="http://saphcmsolutions.com/permission-roles-derivation-inheritance/" target="_blank" rel="noopener">permission roles derivation</a> which makes life a way easier.</p>