Editing Predefined Authorizations 
Editing Predefined Authorizations
Suppose you have created a role based on a selection of menu functions.
You can generate authorizations for this role automatically. Most of the fields for these authorizations are filled with SAP–assigned default values. However, you can add missing values, change default values and also add additional authorizations from SAP templates or profiles.
Generating Authorizations
To create authorizations for a role, choose Authorizations in the role maintenance.
The Authorizations tab displays creation and change information as well as information on the authorization profile (including the profile name, profile text and status).
There are open as well as default authorizations for the transactions you assign to the role. You can change this authorization data by choosing Change authorization data in Authorizations. Finally, you can use the Profile Generator to create an authorization profile based on this data. The authorization profile generated in this way is added to the authorization profiles of the users in the role after the user master records are compared.
If you choose Expert mode for profile generation, you can choose the option with which you want to maintain the authorization values. This option is automatically set correctly in normal mode.
The Authorizations tab index displays whether or not the corresponding authorization profile is current. The profile is not current if the display is red or yellow. The profile status text displayed on the tab explains the status of the profile in more detail. This helps you determine why the profile is not current.
Choose Change authorization data and then proceed as follows:
Organization levels can be plants, company codes and business areas, for example. For each field that displays an organizational level, you determine the global values for these roles.
Save your entries.
The system only displays the dialog box if the selected authorization data contains organizational levels.