Preparatory Steps

Preparatory Steps

When you activate the Profile Generator, you permit specified authorization checks to be deactivated. The Profile Generator is active in the standard system (the system profile parameter auth/no_check_in_some_cases is set).

This setting has the following effect:

When a transaction is called, the system always checks to see whether the authorization checks contained within it are to be suppressed.

The authorization Profile Generator is activated. The system displays Authorizations on the initial screen for Transaction PFCG (Activity Group Maintenance).

Execute the following steps in the SAP Reference Implementation Guide (IMG):

Copy SAP default settings for check indicators and authorization field values

Using Transaction SU25 (step 1), copy the default values delivered by SAP. This is how you import the SAP check indicator default values for the authorization objects within a transaction, and the authorization field values for the Profile Generator into the customer tables (tables USOBX_C and USOBT_C). You can edit these in Transaction SU24.

You can change both configurations to meet your requirements.

To apply an upgrade, follow steps 2a to 2e.

It may take a few minutes to copy the SAP defaults into the customer tables.

See also the online documentation in Transaction SU25.

Generate the company menu

Execute all steps in Transaction SSM1 to generate the company menu. This selects from the SAP menu those transactions implemented by the company.

Based on this, you can specify the functions and transactions for an activity group, create an authorization profile for this and assign a user in a later step.

Schedule Background Job for Time Limits

You can set a time limit on the assignment of users to activity groups. To ensure that these changes are reflected in the user master record, you need to schedule a background job to make the relevant adjustments daily.

For more information, see Comparing User Master Records.

To maintain the default check indicator settings, use Transaction SU24 (see the following topics). To do this you require the User Master Maintenance: User Groups (S_USER_GRP) authorization with value * in the fields CLASS and ACTVT.

You can edit the default authorizations for the Profile Generator on the initial screen of the Profile Generator (see Elements in the Browser View).