| authorization administrator (BC-SEC-USR) |
The user responsible for maintaining authorizations and authorization profiles.
For security reasons, this user should not be authorized to activate authorizations and profiles or to maintain user master records. With such authorizations, the user could single-handedly define, activate, and assign system access authorizations.