Generating Authorization Profiles 
Generating Authorization Profiles
Use
Authorization profiles must be generated before they can be assigned to users. An authorization is generated for each authorization level in the browser view, and an authorization profile for the whole role as represented in the browser view.
Prerequisites
Before generating an authorization profile, the system checks that you are authorized for the object Maintain User Masters: Authorization Profile (S_USER_PRO).
If the changed profile is already assigned to some users:
You should only generate profiles after the users of the role you want to edit have logged off the system. If the users are logged on, they must logon again after generation to have the current authorizations.
Procedure
When you have maintained all fields and organizational levels, generate the authorizations or the profile of this role, by choosing 
or Authorizations
The following dialog box appears:
You can change the profile name and text.
When you generate an authorization profile the technical names of the authorizations are automatically reorganized.
You can display the technical names by choosing Utilities
To avoid problems with number assignment, you should reorganize the numbers nn from time to time. Choose Utilities
® Reorganize. This restarts the number assignment starting at 00.You can display an overview of the existing authorization profiles for this role by choosing Authorizations
® Profile overview.The overview contains profile names and their maintenance status (not generated, maintenance version, active version).
Result
Whenever you assign the role to a user, you can also assign the generated authorization profile to that user (see
Assigning Profiles).The system then displays the current status of the authorization profile: generated.
See also:
Regenerating Authorization Profiles Following Changes Check roles for existing profiles