Role Maintenance

Purpose

You must maintain roles when the roles in the standard delivery need to be adjusted or you need to create new roles.

Implementation

The SAP Standard contains a large number of roles. Check whether you can use a user role delivered in the standard before you define roles yourself.

Choose Tools ® Administration ® User maintenance ® Infosystem ® Roles ® Roles by complex selection criteria in the SAP menu in the SAP Easy Access initial menu for an overview of the delivered roles.

You can also display a list of the delivered roles in the possible entries help for the Role field in the role maintenance (Tools ® Administration ® User maintenance ® Roles).

You can copy and modify existing roles.

If you do not find a suitable role, write a job description before you maintain the role. See Initial installation procedure.

All maintenance tasks can be executed centrally by a single "superuser". Alternatively, you can distribute these tasks amongst more than one user to ensure greater system security. Further details are contained in the section Organizing User and Authorization Maintenance.

Features

The system administrator chooses transactions, menu paths (in the SAP menu) or area menus, in the role maintenance (transaction PFCG). The selected functions correspond to the activities of a user or a group of users.

The tree which a system administrator creates here for a user group corresponds to the user menu which appears when the user to whom this role is assigned logs on to the SAP System.

The Profile generator automatically provides the required authorizations for the selected functions. Some of them have default values. Traffic lights show you which values need to be maintained.

Generate an authorization profile and assign the role to the users. The user menu appears when a user logs on to the SAP System.