Dear All,
I have been practicing SAP Security for almost 4 years now. I want to know if you have any SAP-provided documents or SAP Notes which tells the proper and best way in transporting roles in ABAP based system. Common on what I am doing right now is based on what specific security change you are doing. I am citing few example:
1. Addition of transaction codes to roles - I include all the derivatives including the parent role in the transport request.
2. Addition of Organizational Values to Organizational Units - I still include all the derivatives and the parent role in the transport request.
I came to a colleague of mine and working in a separate engagement and tell me that in example no. 2 you should only transport the role you have modified in the transport request.
Hoping for anyone to share anything about transporting roles, providing SAP provided documents would be a big help! 
Thanks in advance.