Symptom
With the standard functionality of RHPROFL0, only the roles assigned to the nearest parent org unit will be retrieved and assigned to each user, and higher parent org units will not be checked.
From the report documentation:
Using the start evaluation path PROFL0 , the system finds and temporarily saves all users in the structure. Starting from these users, on a key date, the system reads all valid related objects for which infotype 0106 (standard authorization profile) and / or 1017 (authorization profile for structural PD authorizations) is maintained, up to the next highest organizational unit. This means that the superior organizational units are not taken into account.
Read more...
Environment
Generation of authorization profile assignments for users in an organizational structure
Keywords
PFCG comparison composite role RHAUTUPD_NEW parent org unit PROFLINT US_ACTGR , KBA , BC-BMT-OM , Organizational Management , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.