All maintenance tasks can be executed centrally by a single "superuser". Alternatively, you can distribute these tasks among more than one user to ensure greater system security. For more information, see Organizing User and Authorization Maintenance.

You can generate authorization profiles either manually or automatically using the Profile Generator.

If you want to maintain authorizations and profiles manually, you need detailed knowledge of all SAP authorization components.

If, on the other hand, you use the Profile Generator, you do not need such detailed knowledge. As a result, implementing an SAP System requires considerably less time and effort.

The Profile Generator creates profiles automatically based on selected menu functions. These are then presented for fine-tuning. The Profile Generator can be integrated with HR-Org (Organizational Management and time dependency).

If you want to use the Profile Generator, we strongly recommended you read the sections Profile Generator: An Example and Profile Generator: Tips and Tricks.

If you want to administer users or authorizations centrally for several clients or SAP Systems, see Central User Administration.

If you want to include authorization checks in your own developments, see Adding Authorization Checks To Your Own Developments.

The SAP Authorization Concept

The Profile Generator

Reducing the Scope of Authorization Checks

The Profile Generator: Generating Authorization Profiles Automatically with the Profile Generator

The Profile Generator: An Example

The Profile Generator: Helpful Hints

Creating and Maintaining Authorizations and Profiles Manually