Global Role Table: menu and tasks
Find SAP roles, inspect their assigned users, open PFCG and search role authorizations across connected clients.
Applies to userXpress 2.0.0.0
Download PDF
- This pageGlobal Role Table: menu and tasks
- This sectionGlobal Role Table
- Full manualuserXpress documentation
Use the Global Role Table when your starting point is a role: you want to find its users, inspect its content or assign it to accounts. The table brings together roles loaded from the connected SAP clients.
A role name belongs to a specific system and client. Filter those columns when you want to work in one part of the landscape, and select the role rows needed by the action.
Click a role row to select it. Hold Ctrl while clicking to add or remove individual rows. To select a range, click the first row, then hold Shift and click the last row.
See Role table columns for field meanings, blank values, column layout and the corresponding SAP fields.
Where Used
Use Where Used to find which users have the selected roles assigned, for example before reviewing or changing those assignments.
- Select the role rows in the Global Role Table.
- Choose Where Used.
- Expand the roles in the assignment report to see their users and assignment details.
The report identifies the system/client for each role. When none of the selected roles is assigned, userXpress reports that result.
Continue with the assigned users
Choose Apply Filter in the report to bring its assigned users into view in the Global User Table. This uses all users under the report’s visible role rows, including users under collapsed rows.
Filter the report’s role rows first when only part of the report should contribute. Filtering the expanded user details does not narrow the account set used by Apply Filter.
The action replaces the Global User Table’s criteria and clears its row selection. Select the resulting account rows for your next task. Any text in the user table’s separate search box still applies.
You can save this account list’s criteria under My Queries. It retains the captured system/client/user identities. Run Where Used again when you need a list reflecting later assignment changes.
Assign
Use Assign when you have already found the roles that the selected users should receive.
- Select the target accounts in the Global User Table.
- Select the role rows in the Global Role Table.
- Choose Assign in the Global Role Table.
- Set the validity dates and overwrite choice in Assign Roles, then choose OK.
See Assign roles from the Global Role Table for system/client matching, the assignment options and per-user outcomes.
PFCG
Use PFCG to open selected roles in SAP role maintenance. SAP GUI must be installed, and the connection must use a SAP Dialog user authorized for PFCG in the selected client.
- Select the role rows in the Global Role Table.
- Choose PFCG.
- For several roles, the confirmation lists each role, system and client. Choose Open N windows, where N is the number of selected roles, to continue. Choose Cancel to return to the table.
Each selected role opens in a separate SAP GUI window. You can continue working in userXpress while those windows are open.
Double-click a role row to open only that role, even when other rows are selected.
The default SAP GUI window limit is five, shared with SU01. If the selection exceeds the available capacity, select fewer roles or close existing windows before choosing PFCG again.
For opening errors, use SU01 or PFCG does not open.
Content Filter
Choose Content Filter to find roles by their maintained authorizations or transaction content. For example, find roles with a particular object/field value without knowing their names.
- Search role content explains the editor and worked queries.
- Comparisons and values explains exact values, coverage, wildcards, ranges and organizational values.
- Role queries and search results explains Run again, Clear role content, query status and incomplete searches.
The content menu also offers Download Filter Template, Import Filters and Export Filters. Use the filter workbook guide to prepare or share saved definitions.
My Queries
Use My Queries for recurring role reviews. Save ordinary column criteria, role content conditions or both. Choose a saved name to apply the definition, then use Save changes or Save query as… after editing it.
Save and reuse role queries describes the complete procedure.
Export the role list
Use Export when you need a report of the roles shown in the table.
- Apply the filters for the roles you want in the report.
- Choose Export.
- Select the Export Format and use Save As to choose the file.
- Choose OK to write it.
The export includes the filtered role rows, including unselected rows. Content Filter → Export Filters serves a different purpose: it saves query definitions for reuse.