All maintenance tasks can be executed centrally by a single "superuser". Alternatively, you can distribute these tasks amongst more than one user to ensure greater system security. Further details are contained in the section Organizing User and Authorization Maintenance.

You can generate authorization profiles either manually or automatically using the Profile Generator.

If you want to maintain authorizations and profiles manually, you need detailed knowledge of all SAP authorization components.

If, on the other hand, you use the Profile Generator, you do not need such detailed knowledge. As a result, implementing an R/3 System requires considerably less time and effort.

The Profile Generator creates profiles automatically based on selected menu functions. These are then presented for fine-tuning. The Profile Generator can be integrated with HR-Org (Organization management, time dependency).

If you want to use the Profile Generator, you are strongly recommended to read the example scenario and the helpful hints.

If you want to administer users or authorizations centrally for several clients or R/3 Systems, you should execute transports. Further details are contained in the section Transporting User Master Records, Authorizations and Profiles.

If you want to include authorization checks in your own developments, see Adding Authorization Checks To Your Own Developments.

The SAP Authorization Concept

Basis System Authorizations

Reducing the Scope of Authorization Checks

The Profile Generator: Generating Authorization Profiles Automatically with the Profile Generator

The Profile Generator: The Profile Generator: An Example

The Profile Generator: Helpful Hints

Creating and Maintaining Authorizations and Profiles Manually