Home TORC: The OneRoleConcept TORC and IdM SAP HCM Security SAP HCM Solutions About KNUZEN Contact Information
KNUZEN   SAP HCM SECURITY
Performance Optimization of structural Authorizations The structural authorizations can have a severe impact on the system performance. To improve the system perfor- mance you can implement the indexation of authorizations.   
Indexing the structural authorisations for BI reporting and performance enhancements The structural authorizations are primarily using the organizational structures for granting access. The structural authorisations can be divided into two groups one for fixed structural authorizations and for dynamic structural authorizations. Example of fixed structural profile. The fixed structural authorisations are independent of the users actual assignment to the organizational structure. The fixed structural authorizations is used for e.g. Personnel administrators so they can get access to a certain part of the organisation despite they are assigned to a position in a staff department such as HR. Dynamic Structural authorizations are the intelligent authorizations and can be used to read a specific point in the structure where the user is being granted access. This is used for MSS to give our line managers access to only their part of the organization or to read the employees assignment to an certain parts of the qualification catalogue or company divided course catalogues. The dynamic structural authorizations are the most efficient profiles we can have if they are customized correctly according to the busness requirement. Exampel of dynamic structural profile. The structural authorizations are based on evaluation paths, which can be set up with transaction OOAW.  The evaluation paths are used in e.g the structural profiles which can be set up in transaction OOSP and finally you can assign the structural profiles to users in transaction OOSB. When the number of assignments between users and structural profiles grows the performance for employees to access employees decrease. And users with multiple functions in SAP where employee data is used can end up with several assignments. Those employees can have serious performance problems and will benefit from being indexed. The indexation is performed by entering the users in T77UU through running report RHBAUS02 or transaction code S_PH0_48000112 this report checks the number of objects each user has from T77UA and if it exceeds the limit you have defined for the report it can enter the user in T77UU fopr you. When the user is entered in T77UU you need to run the report RHBAUS00 S_PH0_48000110 this is the report, which will generate the index for the user. Example of a indexation selection for one user ID. Please make sure that your evaluation paths don’t have duplicate lines or loop runs. This kind of mis-customising will increase the generation time for RHBAUS00 from a matter of seconds to never ending runs. You can check your evaluation paths for SAP HR gives you the opportunity to generate an index so the structural authorization check isn’t forced to drill through all the evaluation paths each time the users access employee data in e.g. PPOME or PA20. But the indexation of users has consequences! A personnel administrator who is used to create a position in PPOME and  then switch over to PA40 for hiring a new employee will experience that employees vanish in front of him when he saves the employees IT0001. This is because the position is not yet granted for the personnel administrators users and some times this can be a serious problem especially for personnel administrators in shared service functions who performs a lot of new hirings. So when you are deciding to use the indexation please consider which employees you need to index and who dosn’t. You can also grant the personnel administrators access to run the indexation for their own user, this can sometimes save you for raised ticket to your support organisation. Hints for troubleshooting problems with RHBAUS00 Note 760439 Hint for MSSQL in RHAS/RHAC Select HRP1001, Implement the BADI RHBAS00_RHBAUS00. This Badi will eliminate double entries or merge adjacents leading to a smaller number of objects and so reducing also the memory needed. At the same time please check note 742638. Recursion check: To check if an entry in T77PR leads to a recursion you can use the report RHSTRU00. For further detail see SAP’s note on the area 90200 See also the page related to performance issues in HCM authorizations in general on this page SAP_HCM_AUTHORIZATIONS_AND_PERFORMANCE_ISSUES.
1: home
2: knuzen_curriculum_vitae
3: The SAP HCM Authorization concept: The OneRoleConcept
4: RCAT: The RootCauseAnalysisTools related to the OneRoleConcept
5: contact.htm
6: SAP_HCM_OVERVIEW
7: Business Control with OneRoleConcept
8: The Details of the OneRoleConcept
9: SAP_HCM_SECURITY_AND_PERFORMANCE
10: The OneRoleConcept Business benefits
11: SAP HCM transit position in Om as DMZ for transfer activity
12: SAP HR structural authorization for multiple parts of the organisation.
13: LSO and PD Catalogue control
14: Knuzen Substitute/ Deputy solution for line managers
15: Enterprice, personnel and organisational structures in SAP HCM
16: sap_enterprise_structures_revisited
17: Clean up SAP Organisational Management
18: Consistency check of SAP OM and PD tables
19: SAP HCM combined with personnel development functionality
20: Optimize the System Performance with indexing structural authorizations: RHBAUS00
21: Identity management with the use of SAP HCM attributes
22: organizational_key_vdsk1
23: master_derived_composite_sap_roles.htm
24: Standard tools for identifying SAP HCM authorization issues
25: Enhance the layout of PPOME and PPOSE the organisational structure
26: Enhance the existing PD model and use it for personnel development
27: To be structural restricted or not to be... thats the question
28: Automate your SAP solution and avoid errors and business break downs
29: SAP HCM Authorizations and performance
30: design_support_organisations_1.htm
31: design_support_organisation_2.htm
32: design_support_organisation_3.htm
33: Upload Documents on your employees
34: Upload Documents on your employees
35: Upload Documents on your employees
36: The role assignment can be used for compliance check and license control.
37: Upload Documents on your employees
38: Upload Documents on your employees
39: Upload Documents on your employees
40: Upload Documents on your employees
41: Data Model for E-ercruiting and Tips & Tricks
42: Upload Documents on your employees
43: Upload Documents on your employees