How To Fix S#681 - Authorizations and profiles of derived roles adjusted

SAP Error Message - Details

• Message type: E = Error

• Message class: S# -

• Message number: 681

• Message text: Authorizations and profiles of derived roles adjusted

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message S#681 - Authorizations and profiles of derived roles adjusted ?

  The SAP error message S#681 indicates that there is an issue related to authorizations and profiles of derived roles in the SAP system. This message typically arises when there are inconsistencies or issues with the authorization profiles assigned to derived roles, which are roles that inherit properties from a parent role.
  Cause:
  
  Inconsistent Authorizations: The derived role may have inconsistencies in its authorization data compared to the parent role.
  Changes in Parent Role: If the parent role has been modified (e.g., authorizations added or removed), the derived role may not automatically reflect these changes.
  Profile Generation Issues: There may be issues during the profile generation process that prevent the derived role from being updated correctly.
  Missing Authorizations: The derived role may lack necessary authorizations that are required for the user to perform their tasks.
  
  Solution:
  
  Adjust Authorizations: Review and adjust the authorizations in the derived role to ensure they are consistent with the parent role. You can do this using transaction code PFCG.
  Re-generate Profiles: Re-generate the authorization profiles for the derived role. This can be done in the PFCG transaction by selecting the derived role and using the "Generate" option.
  Check for Changes in Parent Role: If the parent role has been modified, ensure that the derived role is updated accordingly. You may need to re-derive the role or manually adjust the authorizations.
  Use the Authorization Check: Use transaction SU53 to check for authorization failures after attempting to perform an action. This can help identify which specific authorizations are missing.
  Transport Issues: If roles are transported between systems, ensure that the transport requests are correctly configured and that all necessary objects are included.
  
  Related Information:
  
  
  Transaction Codes:
  
  PFCG: Role Maintenance
  SU53: Display Authorization Check
  SUIM: User Information System (for checking user authorizations)
  
  
  
  Documentation: Refer to SAP Help documentation for detailed information on role management and authorization concepts.
  
  
  Best Practices:
  
  Regularly review and audit roles and authorizations to ensure they are up-to-date and aligned with business requirements.
  Implement a change management process for role modifications to minimize inconsistencies.
  
  
  
  By following these steps, you should be able to resolve the S#681 error and ensure that the derived roles have the correct authorizations.