Use Role Generation to generate the master role and the selected derived role, or roles, to the selected system. To make changes to the authorization data for the derived role, you must modify the master role and regenerate the master role with the modification.

Changes to roles are not available for use until after the role is generated in the SAP backend system during role maintenance.

You can generate a single role or you can mass generate several roles at once. You can also generate a role or roles in the default system or in multiple systems. You can select system roles and derived roles to generate. The master role is always generated with the derived roles.

A background job is scheduled automatically and the Job ID is shown during the time when you are trying to generate the roles under Mass Maintenance.

For more information about setting a default system, see the Access Control Configuration documentation.

You can save time by generating the same role or similar roles in similar systems in one landscape, such as all Accounting systems.

You can also make the user name and password that you use for role creation and maintenance available across all systems in the landscape, so you can access Role Generation to generate roles.