We have found that a few of our SAP roles are mapped with multiple profile names. Is it possible to have multiple profiles to a single role? Note: These roles are derived roles, not composite roles and not the composite profiles.
Here are some examples which may provide a clearer view of what I mean.
| Roles and Profiles | User ID |
| C_PUS_Mang (Profiles ##: T-D3060077, T-D30600771) | XXXX |
| C_PUS_DESp_SUPERV (Profiles ##: T-D3060644, T-D3060076) | XXXX |
Requires Free Membership to View
When you register, you will start receiving targeted emails from my award-winning team of editorial writers. Our goal is to keep you informed on the hottest topics and biggest challenges faced by SAP professionals today.
Hannah Smalltree, Editorial Director
Before SAP had roles, they had SAP profiles. Because of the data design, a profile could only have a limited number of authorizations. Roles are still only a technical layer on top of profiles, and profiles still have the original limitations.
Consequently, when a large role has too many authorizations for one profile, a second profile is generated and assigned. This is merely a technical feature. Your auditors should focus their evaluation on the roles assigned. There are other technical considerations, but this answer should be sufficient for almost all situations.
This was first published in April 2009