Show TOC

Defining Profiles and AuthorizationsLocate this document in the navigation structure

You can maintain both profiles and authorizations from the profile maintenance functions.

Use the default profiles provided by SAP as templates for your own profiles:

  1. Use the SAP naming convention to select default profiles for the application with which you are working.

  2. Example: Searching for profiles with F _* selects profiles for the Financial Accounting application.

    SAP recommends you use the Profile Generator to create profiles and copy predefined user roles. Only use the profiles predefined by SAP if the documentation explicitly informs you to do so.

    SAP does not guarantee that standard authorizations delivered with the R/3 System will remain the same in future releases or updates. You should therefore make your own copies of predefined profiles. Otherwise, you must check your authorizations after installing a release or update.

  3. Copy the profile that most closely matches the profile you need.

  4. Use a systematic naming convention. You can change the SAP naming convention, for example.

    SAP recommends substituting a different character for the underscore found in the second position in SAP profile names. That way, the profile name makes the source of the profile immediately clear.

    Example: To create your own profile for customer accounts clerks, you could copy the default profile F_CUSTOMERS to F: CUSTOMERS. Changing only the second character makes the new profile name unique, but you can easily tell where the profile came from.

  5. Maintain the profile and the authorizations it contains.

  6. Delete the authorizations that you do not require by deleting the corresponding lines from the profile.

    If you need to change an authorization, then you should first create a copy of it. Delete the original authorization from your profile and insert your copy in its place. You can then edit the authorization by double-clicking on it. Do not edit the original authorization, as your changes may be overwritten when you update your system with a new Release.

    You can create new authorizations. Choose Simple auth. When you select an object class and an object, existing authorizations are displayed.

  7. Activate all the authorizations that you have changed.
  8. When you have finished editing authorizations, activate the profile. It is then ready for use.