SAP Basis

Unit 11: Basics of User Administration ADM100
Role Maintenance: Menus and Authorizations
Figure 132: Role Maintenance
New naming since SAP R/3 4.6C: Role instead of activity group, role
maintenance instead of profile generator. Advantages of role maintenance:
• Collection of the authorization objects (that are checked in the
transactions) and creation of the associated authorizations with the
necessary values, as long as this is technically possible.
• Assignment of roles to users
• Generation of the user menu
Role Maintenance (transaction PFCG, previously also called Profile
Generator or activity groups) simplifies the creation of authorizations and
their assignment to users. In role maintenance, transactions that belong
together from the company’s point of view are selected. Role maintenance
creates authorizations with the required field values for the authorization
objects that are checked in the selected transactions.
A role can be assigned to various users. Changes to a role therefore have
an effect on multiple users. Users can be assigned various roles.
The user menu contains the entries (transactions, URLs, reports, and so on)
that are assigned to the user through the roles.
418 © 2003 SAP AG. All rights reserved. 2003/Q3