Adjust Roles and Profiles 

 

●        SAPSolution Manager Security Guide contains information about the roles and profiles delivered with the SAPSolution Manager.

●        Before you assign SAP standard roles and profiles to users, copy and specify them.

 

SAP delivers roles and profiles with default values. If they are missing, you must set the values in the authorization objects yourself. Proceed as follows:

...

       1.      Load the roles/profiles from client 000 into your target client. The following options are available:

○       Transport client 000 into your target client (roles and profiles)

○       Upload and Download (for roles in transaction PFCG)

       2.      Copy the roles/profiles to your namespace.

                            a.      Choose Role Maintenance (transaction PFCG).

                            b.      Enter a role name and choose Copy Role.

                            c.      Enter the name of the new role in the To Role field.

                            d.      Choose Copy All.

                            e.      Save your entries.

       3.      Complete missing values in the authorization objects.

                            a.      Choose the Authorizations tab.

                            b.      Choose Change Authorization Data.

                            c.      Enter your own values for the authorization objects, or double-click on the yellow traffic light.

The authorization objects appear with a green traffic light.

When you double-click on the yellow traffic light, the value “*” appears. This grants full authorization for this field of the authorization object.

                            d.      Save your entries.

                            e.      Generate the authorization profile.

       4.      Assign the role to users.

                            a.      Choose the Users tab.

                            b.      Enter the user names.

                            c.      Choose User Adjustment.

                            d.      Save your entries.

You can also assign the roles to the users in the user maintenance (transaction SU01).