How to solve error number 5 during generation of derived roles

Hey all,

I have seen several cases in which the system pops up message no. S#377 when you’re trying to generate the authorization profile of derived roles… Most of the times, the root cause of this issue usually is the lack of entries within table AGR_FLAGS.

In order to overcome this issue you can have a look at SAP Note 770358, that describes how to identify the affected roles, and provides a report that will smooth the work helping you finding the entries that present the issue…

After adjusting the entries affected by the information missing, you should be able to perform the generation of the authorization profiles without further problems.