Adding the Global Role Administrator When Creating a Role

Allow global role administrators to administer a new role.

Prerequisites

MANAGE ROLES system privilege.

Task

If you specify at least one role administrator when you create a role, global role administrators cannot manage the role unless explicitly specified.

For this reason, SAP strongly recommends that you consider always adding the global role administrator to the list of role administrators.

To add the global role administrator during the creation process, execute one of these statements:

Create Type	Statement
Global role administrator only; no role administrators	CREATE ROLE `role_name`
Both role and global role administrators^*	CREATE ROLE `role_name` WITH ADMIN ONLY SYS_MANAGE_ROLES_ROLE, `admin_name [,...]`

Create Type

Statement

Global role administrator only;

no role administrators

CREATE ROLE role_name

Both role and global role administrators^*

CREATE ROLE role_name

WITH ADMIN ONLY SYS_MANAGE_ROLES_ROLE, admin_name [,...]

^*Global role administrator can have only administrative rights (WITH ADMIN ONLY) on a role. Therefore, if you specify both role and global role administrators when creating a role, only the WITH ADMIN ONLY clause is valid.

Example:

Execute this statement to create the Sales role and allow only global role administrators to manage it:

CREATE ROLE Sales

Execute this statement to make Joe and Bob role administrators of the Sales role, with administrative rights only, as well as to allow global role administrators to manage the role:

CREATE ROLE Sales WITH ADMIN ONLY SYS_MANAGE_ROLES_ROLE, Joe, Bob