I was told that when creating a new role, one should avoid using the menu tab and add transactions.
I should use a template role and add the transactions and objects thru the Authorisations tab.
Is this true ?
If I want to create a role from scratch, the menu tab option seems to me the obvious way.
Thanks in advance.
When they told you to manually maintain S_TCODE were they laughing?
Adding via S_TCODE means you have to first import a second S_TCODE object (you'll see that the original one is not modifiable..)
If you do carry on and add manually then, as stated, you won't pick up the SU24 objects so you will probably receive auth errors during UAT. That means the next step is to manually add the object/values to clear the SU53/ST01 reports. If you ever maintain that role in the future and say take out one of the manually added tcodes all of the manually added objects remain. Doing it correctly via SU24/PFCG menu keeps things clearer.
For the composite role menu update after changing the menu in its singles you've gone too far in maintaining the composite role unfortunately - forget eCATT/LSMW options as it's just ongoing maintenance.
Try creating a brand new composite and insert all of the singles from the original composite in DEV but don't go anywhere near the menu update button in the composite - just press save and exit.
Add the new composite (which has no menu) to a test usr in DEV and log on as the test user, change your settings to display first level and you will see the singles and their menus. Doing it this way means no more composite role menu updates.