How To Fix S#608 - Cannot delete role & due to derived roles

SAP Error Message - Details

• Message type: E = Error

• Message class: S# -

• Message number: 608

• Message text: Cannot delete role & due to derived roles

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message S#608 - Cannot delete role & due to derived roles ?

  The SAP error message S#608, which states "Cannot delete role & due to derived roles," typically occurs when you attempt to delete a role that has derived roles associated with it. Derived roles are roles that inherit authorizations from a parent role, and SAP prevents the deletion of a parent role if there are derived roles still linked to it.
  Cause:
  
  Derived Roles: The role you are trying to delete has one or more derived roles. SAP enforces this restriction to maintain the integrity of the authorization structure.
  Role Dependencies: There may be other roles or objects that depend on the role you are trying to delete.
  
  Solution:
  To resolve this error, you can follow these steps:
  
  
  Identify Derived Roles:
  
  Use transaction code PFCG (Profile Generator) to check the role you are trying to delete.
  In the role maintenance screen, navigate to the "Derived Roles" tab to see which roles are derived from the role you want to delete.
  
  
  
  Delete or Adjust Derived Roles:
  
  If you want to delete the parent role, you must first delete or adjust the derived roles. You can either:
  
  Delete the derived roles if they are no longer needed.
  Modify the derived roles to remove their dependency on the parent role.
  
  
  
  
  
  Delete the Parent Role:
  
  Once all derived roles are deleted or adjusted, you can proceed to delete the parent role without encountering the error.
  
  
  
  Check for Other Dependencies:
  
  Ensure that there are no other dependencies or references to the role in question, such as user assignments or other roles that might be linked.
  
  
  
  Related Information:
  
  Role Management: Understanding how roles and derived roles work in SAP is crucial for effective role management. Derived roles inherit authorizations from their parent roles, which can simplify the management of user permissions.
  Transaction Codes: Familiarize yourself with relevant transaction codes such as:
  
  PFCG: Role maintenance and management.
  SU01: User maintenance, where you can check user assignments to roles.
  SUIM: User Information System, which can help in auditing roles and authorizations.
  
  
  Documentation: Refer to SAP Help documentation for detailed information on role management and authorization concepts.
  
  By following these steps, you should be able to resolve the S#608 error and manage your roles effectively in SAP.