Many people ask me if there are any restriction on number of roles that can be assigned to a user and whether this is a configurable setting. SAP actualy does not restrict number of roles that can be assigned to a user. However, due to data structure of the table USR04 (which stores the profiles assigned to a user), maximum 312 profiles can be assigned to a user.
The maximum length of the field PROFS in table USR04, which stores profiles assigned to a users is 3750 characters. Out of this, first 2 characters are used for 'change indicator' ad therefore 3748 fields are available to store rofile names. The profile name can be 12 characters long and therefore, maximum profile that can be stored for a user is 312.
Change indicator indicates informatin about the status of the user (i.e., user created 'C' or user changed 'M').
Earlier, function module GET_AUTH_VALUES assumed that a user can be assigned maximum 300 profiles (although actually 312 profile assigments is technically possible). When more than 300 profiles were assigned to a user, the function module discarded all found profiles. This limitation was solved by SAP Note 841612, whcih provided a solution for increasing the number of usable profiles per user from 300 to the maximum value of 312.
BTW, there is no restrictions on number of transactions that can be assigned to a role - just use the '*' wild character and you can assign all transactions to a role!
0 comments:
Post a Comment