Create Roles 

Use

User-specific menus can be displayed for users after they have logged on to the SAP System by using either pre-defined roles or roles you created.

The role also contains the authorizations users need to access the transactions, reports, web-based applications and so on, contained in the menu.

You can assign a role to an unlimited number of users.

Prerequisites

Check the suitability of the roles delivered by SAP before you create your own roles. You can use the user role examples just as they are delivered with the SAP System. If you want to modify them, all you need to do is copy the SAP template.

See Assign standard roles and Change and assign roles.

Procedure

The creation of a single role is described below. To create a composite role, see Create composite role.

To create a single role:

  1. Choose the pushbutton Create role or the transaction PFCG in the initial transaction SAP Easy Access. You go to the role maintenance.
  1. Specify a name for the role.

    2. The roles delivered by SAP have the prefix 'SAP_'. Do not use the SAP namespace for your user roles.

    SAP does not distinguish between the names of simple and composite roles. You should adopt your own naming convention to distinguish between simple and composite roles.

  2. Choose Basic maintenance (in the Profile, Other objects menu).
  1. Choose Create.
  1. Enter a meaningful role description text. You can describe the activities in the role in detail.

You may use an existing role as a reference. See Derive roles.

  1. Assign transactions, programs and/or web addresses to the role in the Menu tab. The user menu which you create here is called automatically when the user to whom this role is assigned logs on to the SAP System. You can create the authorizations for the transactions in the role menu structure in the authorizations tab.

If you want to call the transactions in a role in another system, enter the RFC destination of the other system in the Target system field.

You should only use RFC destinations which were created using the Trusted System concept ( Trusted System: Relationships between R/3 Systems) to guarantee that the same user is used in the target system. This is only necessary if you want to navigate via the Easy Access Menu in the SAPgui.

If you use the Workplace Web Browser, you can use any destination containing a logical system with the same name.

If the Target system field is empty, the transactions are called in the system in which the user is logged on.

You can also specify a variable which refers to an RFC destination. Variables are assigned to the RFC destinations in the transaction SM30_SSM_RFC.

To distribute the role into a particular target system, specify the target system (its Release must be 4.6C) and choose Distribute. This function is most useful when you use the Workplace.

You can create the user menu:

You can copy complete menu branches from the SAP menu by clicking on the cross in front of it in the user menu. Expand the menu branch if you want to put lower-level nodes or individual transactions/programs in the user menu.

this function copies a defined role menu structure in the same system into the current role. You can also copy the menu structure of a role delivered by SAP. Click on the menu branches and copy them.

You can copy area menus (SAP Standard and your own) into a role menu. Choose an area menu from the list of menus and copy the transactions you want.

See Upload/Download roles.

You can put a transaction code in the user menu directly.

This function puts programs, transaction variants or queries in the user menu. They need not be given a transaction code.

ABAP Report

Choose a report and a variant. You can skip the selection screen.

You can generate a transaction code automatically and copy the report description by setting checkboxes.

SAP Query

Enter a user group and query name. If the query has a variant, you can specify it. You can also specify a global query. See Query work areas.

Transactions with variants

The system administrator can create transaction variants in the SAP System Personalization. Transaction variants adjust complex SAP System transactions to customer business processes, by e.g. hiding superfluous information and adding other information such as pushbuttons, text or graphics. You can put a transaction variant call in a user menu by entering the transaction code and variant which you created in the transaction SHD0.

BW report

Include a Business Information Warehouse report. Enter the report ID.

ReportWriter, Search, Report

These function put other application-specific report types in the user menu.

Enter other objects:

Web address or file

Enter internet/intranet links with a descriptive text and the web address. You can enter a file name if the browser can call an application.

Drag and relate component

Enter the component name.

Knowledge Warehouse link

Use the Document field possible entries help. Choose the information object type. You go to a selection screen in which you can search for the object in the Knowledge Warehouse.

There are other pushbuttons for editing the user menu. Choose a menu entry with the cursor before you call one of the following functions.

Function:

Meaning

 Create folder

Group transactions, programs, etc. in a folder

 Change node text

Change a menu entry text

 Move down

Move a menu entry down one place

 Move up

Move a menu entry up one place

 Delete nodes

Delete a menu entry
Any subnodes are also deleted.

 Delete all nodes

Delete the complete role menu

 Translate node

Translate a menu entry

 Documentation

Display the documentation of transactions, programs, etc.

 Find doc.

Find programs

You can restructure the menu by Drag & Drop.

The Menu tab status is red if no menu nodes are assigned. If at least one menu node is assigned, the status is green.

You can assign Implementation Guide (IMG) projects or project views to a role under Utilities ® Customizing auth. Do this to generate IMG activity authorization and assign users. The authorization to perform all activities in the assigned IMG projects/project views is generated in profile generation. You make the assignments in a dialog box. Choose Information to display more information on using this option.

  1. Save your entries.

Result

You have created a role.

The next section Edit predefined authorizations describes how to display and edit predefined authorizations.

See also:

Using composite roles