In this step, you can create authorization profiles automatically using transaction PFCG Role Maintenance , or manually.
If you want to maintain authorizations and profiles manually, you must have detailed knowledge of all SAP authorization components.
If you use the profile generator in the Role Maintenance transaction, such detailed knowledge is not required. For this reason, we recommend using the profile generator.
To assign an authorization profile to a user, perform the following steps:
If you require detailed information on this procedure, see the documentation on transaction PFCG.
Note
Authorization profiles that have been created manually or supplied by SAP can also be used in roles. In this respect, you can create a role without a menu, and include the appropriate profile in the authorization data of the role. For detailed information, see the documentation on transaction PFCG.