Defining Profiles and Authorizations
You can maintain both profiles and authorizations from the profile maintenance functions.
Use the default profiles provided by SAP as templates for your own profiles:
Example: Searching for profiles with F
SAP recommends you use the Profile Generator to create profiles and copy predefined user roles. Only use the profiles predefined by SAP if the documentation explicitly informs you to do so.
SAP does not guarantee that standard authorizations delivered with the R/3 System will remain the same in future releases or updates. You should therefore make your own copies of predefined profiles. Otherwise, you must check your authorizations after installing a release or update.
Use a systematic naming convention. You can change the SAP naming convention, for example.
SAP recommends substituting a different character for the underscore found in the second position in SAP profile names. That way, the profile name makes the source of the profile immediately clear.
Example: To create your own profile for customer accounts clerks, you could copy the default profile F_CUSTOMERS to F: CUSTOMERS. Changing only the second character makes the new profile name unique, but you can easily tell where the profile came from.
Delete the authorizations that you do not require by deleting the corresponding lines from the profile.
If you need to change an authorization, then you should first create a copy of it. Delete the original authorization from your profile and insert your copy in its place. You can then edit the authorization by double-clicking on it. Do not edit the original authorization, as your changes may be overwritten when you update your system with a new Release.
You can create new authorizations. Choose Simple auth. When you select an object class and an object, existing authorizations are displayed.