Performing Role Mass Maintenance Operations


After completing this lesson, you will be able to:

  • Perform role mass maintenance operations

Mass Role Maintenance

Role Mass Update

Let’s say you must update multiple roles based on specific requirements. Instead of updating all roles individually in the Role Maintenance app, use the Mass Role Update app, which is a more efficient way of working.

The app allows you to update multiple roles selected by your criteria. It allows you to update, delete, or add new attribute values.

To open the Mass Role Update app, select the tile.
Role Mass Update: Step 1 (Select Roles).

The updating process guides you through four steps:

  1. Select Roles
  2. Select criteria
  3. Select values
  4. Scheduling

In the first step, select the roles that you want to update. Next, you select the attribute of the roles that you want to update. This includes role sensitivity, owners, certification periods, and so on. You can also select all attributes. Based on your criteria selection, you define the new attribute values for the selected roles and schedule the update in the foreground or background.

Performing Mass Role Generation

The Mass Role Generation app enables you to generate multiple roles at once.

To open the Mass Role Generation app, select the tile.
Mass Generation: Step 1 (Main Step 1).

You can select between the following options for the methodology of roles to be generated:

  • Do not change Methodology.
  • Keep in Generation Phase.
  • Complete Generation Phase.

Performing Mass Role Derivation

The Mass Role Derivation app allows you to perform mass derivation of roles.

To open the Mass Role Derivation app, select the tile.
Mass Role Derivation. Step 1 (Select Org. Value Map.

It consists of the following three steps:

  1. Select Organizational Value Map.
  2. Select Master Role.
  3. Derive Roles.

In the first step, you select the organizational value map that you have previously defined. It contains the relevant organizational level, including the values. For example, you must define the company code BUKRS with multiple values from a range. In the second step, you can select one or multiple master roles. Finally, you derive the roles either in the foreground or in the background. The application derives one new role for each master role.

Perform Business Role Management Activities

Business Scenario

In this unit, you've learned how to define roles, analyze their risks, and manage them using the Business Role Management component of SAP Access Control. Now, it's your turn. Reinforce what you've learned by conducting the following exercise and navigating yourself through the process.

Exercise Options

To start the exercise, choose Start Exercise in the figure below.

A pop-up opens. Now, you have the following options:

  • Choose Start: the simulation starts. Follow the simulation to learn how to create a process project.
  • Choose Open PDF Document: a pdf opens. Based on the steps described in this document, you can perform the exercise in your own system landscape.

Log in to track your progress & complete quizzes