lam suite / module · roles
Roles — PFCG administration without PFCG
Single, composite, master and derived roles: see the full hierarchy of your role concept and change it without opening PFCG for every modification.
The problem: a hierarchy PFCG never shows
A clean role concept relies on a hierarchy — composites, master roles, derived roles per organizational level. But PFCG shows it role by role, never as a whole: you cannot see at a glance which derived roles depend on which master, or which composites include which role.
As a result, propagating a master role change to its dozens of derived roles is tedious, risky work — and naming conventions drift over the years, and over consultants.
What the module does
The Roles module maps your full concept — composites, masters, derived roles — and makes the hierarchy navigable. Changes are made from the application, with controlled propagation from master roles to their derived roles, respecting organizational levels.
Before anything is written to SAP, the platform computes and displays the exact differential: what will be added, removed or changed, role by role. You approve with full knowledge.
What your teams gain
A hierarchy you can finally read
Composites, masters, derived roles: the full structure of your role concept, visible and navigable — not reconstructed from memory.
Controlled master → derived propagation
A master role change flows down to its derived roles in a controlled way, without reworking each one by hand.
The differential before the write
Every change is simulated against the real system state and shown before execution. No surprises in production.
Conventions that last
The structure the tool enforces helps naming and build conventions survive the years — and team changes.
See this module on your own data
A few standard extractions are enough for a demonstration on your data — no installation, no connection to your systems, no commitment.
contact@lam-consult.be