Considerations for multiple group profiles

By using group profiles, you can manage authority more efficiently and reduce the number of individual private authorities for objects. However, the misuse of group profiles can have a negative effect on the performance of authority checking. This topic provides some suggestions on using multiple group profiles.

A user can be a member of up to 16 groups: the first group (GRPPRF parameter in the user profile) and 15 supplemental groups (SUPGRPPRF parameter in the user profile).

Here are suggestions when using multiple group profiles:
  • Try to use multiple groups in combination with primary group authority and eliminate private authority to objects.
  • Carefully plan the sequence in which group profiles are assigned to a user. The user’s first group should relate to the user’s primary assignment and the objects used most often. For example, assume a user called WAGNERB does inventory work regularly and does order entry work occasionally. The profile needed for inventory authority (DPTIC) should be WAGNERB’s first group. The profile needed for order entry work (DPTOE) should be WAGNERB’s first supplemental group.
    Note: The sequence in which private authorities are specified for an object has no effect on authority checking performance.
  • If you plan to use multiple groups, study the authority checking process described in How the system checks authority. Make sure that you understand how using multiple groups in combination with other authority techniques, such as authorization lists, might affect your system performance.