SAP Basis

ADM100 Lesson: Authorization Concept
Solution 24: Working with Roles
Task 1 Copy a Role Template
Copy a role template and assign a user to it.
1. Select the delivered single role SAP_BC_ENDUSER and copy this
completely to your own role ZSAP_BC_ENDUSER.
a) Start transaction PFCG. Place the cursor on the input field
for roles. Use the F4 help to select the delivered single role
SAP_BC_ENDUSER. Choose Copy. In the dialog box that
appears, enter ZSAP_BC_ENDUSER in the To role field and
choose Copy All.
2. Check the transactions assigned for the user menu with this role.
a) Choose Change in the initial screen of transaction PFCG for the
role ZSAP_BC_ENDUSER. Switch to the Menu tab page. Switch
to the display of the transaction codes (choose the magnifying
glass pushbutton) and open the Functions from Basis folder.
3. Check the authorizations of the role, and maintain open
authorizations if necessary.
a) Choose the Authorizations tab page and then choose Change
Authorization Data. Check the authorizations for the role and
maintain open authorizations if necessary, by, for example,
clicking the yellow traffic light icon and confirming the system
query as to whether full authorization should be assigned with
Execute. Save your profile settings and confirm the dialog box
by choosing Execute. ChooseGenerate. LeavetheChange Roles:
Authorizations screen by choosing Back.
4. Assign the role to the user ADMIN##.
a) Choose the User tab page and enter ADMIN## in the User ID field.
If user ADMIN## does not exist, create a user with this name in
transaction SU01 in a new session.
5. Perform a user comparison.
a) Choose User Comparison and then choose Complete Reconciliation.
Task 2 Create Your Own Role (Optional)
Create your own role.
Continued on next page
2003/Q3 © 2003 SAP AG. All rights reserved. 427