The Authorization Concept

Roles are the basis for defining user authorizations. Roles generate profiles and authorizations for users. For more information on roles and authorizations, see Authorizations, Profiles, and the Profile Generator.

Authorizations enable users to perform particular functions in the SAP System. Each authorization relates to an authorization object. Authorizations are entered in the user master record, enabling the respective users to work productively with the system.

Authorization objects make possible complex checks, linked to several conditions, of an authorization that allows a user to execute an action.

Authorization profiles encompass a list of authorizations that control user access to various areas of the system. The authorization profiles are defined in the user master record for the respective user when the SAP System is installed.