SAP delivers predefined roles with default values. If these values are missing, you need to set them manually in the authorization objects.
Note
This procedure does not apply to roles that you maintain in SAP Solution Manager Configuration (transaction SOLMAN_SETUP
).
To manually adjust roles, proceed as follows:
Load the roles and profiles from client 000 into your target client.
You have the following options for this step:
Transport the roles and profiles from client 000 into your target client
In client 000, download the roles and profiles in Role Maintenance (transaction PFCG
), and upload them in your target client.
Copy the roles and profiles to your namespace.
Open Role Maintenance (transaction PFCG
).
Enter a role name and choose Copy Role
.
In the To Role
field, enter a new name for the role.
Choose Copy All
.
Save your entries.
Complete missing values in the authorization objects.
On the Authorizations
tab page, choose Change Authorization Data
.
Enter your own values for the authorization objects.
Note
To grant full authorization (value *) for a particular field, double-click the yellow traffic light icon.
Save your entries.
Generate the authorization profile.
Assign the role to users.
On the User
tab page, enter the user names to which you want to assign the role.
Choose User Comparison
.
To save your entries, choose Complete Comparison
.
Note
You can also assign roles to users in User Maintenance (transaction SU01
).
For more information, see the security guide available on SAP Service Marketplace at
.