Creating and Maintaining Authorizations and Profiles Manually

While it is possible to maintain authorizations and profiles manually we strongly recommend that you do not. Instead, use roles and role maintenance functions of Role Maintenance (transaction PFCG) to maintain your user authorization data.

As with Role Maintenance, first define all job descriptions in the job description for your organization. You then define the desired authorizations for each job description. These authorizations consist of fields that contain values. The authorization checks in SAP systems use these values to determine whether a user is authorized to perform certain actions. You can combine multiple authorizations in a profile. You can also create composite profiles. You then assign to each user the profiles that he or she requires to perform his or her tasks.

This section describes how to create and maintain authorizations manually.