Function

Comment

Change ()

Change and assign delivered roles or change customer roles

Display ()

Display single or composite roles

Create Roles ()

Create Roles

Guidelines for creating roles contains an overview of the procedure.

Create Composite Roles ()

Create Composite Roles

Add to Favorites ()

Role is put in the tree display.
The Favorites are displayed when you call the role maintenance transaction or choose Views.
To delete a role from the Favorites, position the cursor on the role. Choose the right-hand mouse key and choose Delete from Favorites in the context menu.

Delete ()

If the deletion is to be transported, put the role objects in a transport request before deleting. To delete the role in a system linked by RFC (For example, a component system in Workplace), choose Role ® Distribute deletion.

Copy ()

Predefined roles are delivered as templates. They begin with the prefix "SAP_". Copy a role to a name in the customer namespace. You can also copy the user assignment and personalization objects.

Transport ()

Transport and Distribute Roles

Transactions ()

Where-Used list for transactions in roles

Views ()

Select views to display roles. The following views exist:

·        Favorites

·        Single roles

·        Composite roles

·        Roles in composite roles

·        Inheritance hierarchy

·        Display roles for role owner

·        Roles grouped by country

·        Roles grouped by industry

·        Roles grouped by target system

Inheritance hierarchy displays all roles from which other roles have been derived. For more information, see Derive roles.

Display Documentation ()

Displays the documentation of delivered roles in the bottom right-hand part of the screen. You can link a role to a document in the Knowledge Warehouse with Utilities ® Info object ® Assign in change mode in role maintenance.

Set Filter ()

Undo Filter ()

You can further restrict the role display at the bottom of the screen with Set filter.

The Roles in composite role view also displays the composite roles to which a single role with the filter search string is assigned.

You can reset filter values with Reset filter.

Function

Comment

Print

All role data (activity assignments, organizational levels, authorization data, user assignment, and so on) are printed.

Download/Upload

To avoid inconsistencies, all roles from which a role is derived are also downloaded. When you download composite roles, all the roles which they contain are also downloaded.

When you upload a role, all role data, including authorization data is uploaded from a file into the SAP System. The user assignments for the role and the generated profiles for the role are exceptions in this case. You must therefore regenerate the authorization profiles after the upload.

Read from another system by RFC

On the following screen Target Systems, select the RFC destinations of the systems from which you want to import roles. The Select Roles (no composite roles) dialog box appears.

The role is imported into the current system through an RFC connection together with its menu and description. The authorization data is not imported, however.

You can also enter the RFC destination as a variable. To do this, you must make a Customizing setting. For more information, see WP: Changing Variables for RFC Destinations.

Function

Comment

Status overview

Output a list of all or selected roles with user assignment, menu, authorization profile and user master record comparison status information.

If you use organization management, the statuses of the Workflow tasks and the indirect user assignments are also displayed.

Mass generation

Generates the profiles of several roles (Mass generation of profiles) at the same time

Mass comparison

User master comparison for several roles (Compare user master records)

Mass transport

You can select several roles to transport in a dialog box (Transporting and Distributing Roles).

Mass download

Save several roles on the PC

Role comparison tool

(Cross-system) role comparison (Comparing Roles).

Templates

Templates for roles

Customizing auth.

Assign projects or views of projects in the implementation guide (IMG) to a role. With this assignment, you can generate targeted authorizations for certain IMG activities and assign users. The authorization required to perform all activities in the assigned IMG projects/project views is generated in profile generation. A dialog window appears in which you can make the assignment. Choose Information to display more information on using this option.

Function

Comment

User master

Call user maintenance (Create and maintain user master records).

Text Comparison for CUA Central System

Send the current list of roles and profiles to the CUA central system.

Display Changes

Display change documents

Installation/upgrade

Call the transaction which initially fills the Profile generator customer tables or updates them after an upgrade. The profile generator customer tables contain a copy of the SAP field value and check indicator default values. (Reducing the Scope of Authorization Checks).

Check Indicators

Call the transaction for changing check indicators and field values for the profile generator.

Auth. Objects ® Display/Deactivate

Display authorization objects with documentation /
Deactivate authorization checks