The mass profile generation transaction tells you which roles already have authorization profiles.

You can generate roles en masse or generate the missing role authorization profiles in the background.

You can limit the choice of roles.

You will need the following authorizations to use Transaction SUPC:

• User master maintenance: Authorization Profile (S_USER_PRO)

• User master maintenance: Authorizations (S_USER_AUT)

• Authorization system: Check for roles (S_USER_AGR)

If you do not want to generate all profiles automatically (last checkbox), you can further restrict the role selection in the next screen.