Profiles Tab

On the Profiles tab, you display the generated profiles of the roles assigned to users. You can also assign manually created authorization profiles to users, granting the users authorizations.

Recommendation

We recommend that you use the profile generator in Role Maintenance (transaction PFCG) instead, and generate the profiles automatically. You can enter composite profiles (a combination of several profiles) in the user master records when manually maintaining profiles.

To maintain profiles manually, use Profiles (transaction SU02).

You can assign a maximum of 312 authorization profiles to a user.

For more information, see SAP Note 410993 Information published on SAP site .

Caution

Never enter generated profiles directly on the Profiles tab, as Compare User Assignments (transaction PFUD) deletes these assignments if there is no entry for them on the Roles tab. When you assign a role to a user on the Roles tab, the profile generated for this role is automatically entered on the Profiles tab.

Special Predefined Profiles

SAP NetWeaver Application Server (SAP NetWeaver AS) contains predefined profiles, the most important of which are explained below:

Table 1: Special Predefined Profiles
Profile Name	Description
SAL_ALL	Assigns all authorizations in SAP NetWeaver AS to users. Use this profile with extreme care.
SAP_NEW	Legacy. The SAP_NEW profile has been replaced with a generated role, SAP_NEW. The authorization object exists to bridge the differences in authorization checks between releases. SAP_NEW enables your business processes to continue functioning until you have incorporated the new authority checks in your authorization concept.
SAP_APP	Legacy. The SAP_APP profile has been replaced with a generated role, SAP_APP. The authorization object contains all application authorizations.

Special Features If You Are Using Central User Administration (CUA)

If you are using CUA with the field distribution setting Global for the Profiles field in User Distribution Field Selection (transaction SCUM), the Profiles tab in the central system has the following special features:

An additional column Receiving system that specifies the system in which the manually generated profile is valid.
An additional Text Comparison pushbutton, with which you can make the profile and role names of the child systems known to the central system.
The profiles generated by the assignment of roles are no longer displayed. These profiles are only displayed in the child systems in which they are valid.