The Profile Generator
The Profile Generator simplifies the creation of authorizations by automating various processes.
The Profile Generator functionality is based on the use of roles. An role is a collection of activities that describe a specific work area. For example, the role "accounts payable accountant" would contain transactions and reports that accounts payable accountants require daily.
The SAP Standard contains a large number of roles. Check whether you can use a user role delivered in the standard to assign authorizations before you define roles yourself. The predefined roles are in the possible entries help for the Role field in the initial screen of the Profile Generator (transaction PFCG), under Tools ® Administration ® User maintenance ®
If you do not find a suitable role, write a job description before you use the Profile Generator. See
Initial installation procedure.
The system administrator chooses transactions, menu paths (in the SAP menu) or area menus, in the Profile Generator (transaction PFCG). The selected functions correspond to the activities of a user or a group of users.
The tree which a system administrator creates here for a user group corresponds to the user menu which appears when the user to whom this role is assigned logs on to the SAP System.
The Profile generator automatically provides the required authorizations for the selected functions. Some of them already have values. Traffic lights show you which values need to be maintained.
Generate an authorization profile and assign the role to the users. The user menu appears when a user logs on to the SAP System. The user menu only contains the transactions, programs, etc for the work area of the user.
For more information about automatic maintenance using the Profile Generator, see:
Reducing the Scope of Authorization Checks
Role maintenance
Role maintenance: Procedure
Role maintenance: Tips and Tricks