B

ROLE MAINTENANCE

2. How to create roles and maintain them

The T-code for maintenance of roles is PFCG

2.3 Change
Role

2.1 Copy
Role

2.4 Display
role

2.8 Whereused List of

roles
2.5 Transport
Role

2.2 Delete
Role

2.7 Composite
Role

2.6 Single
Role

A large number of frequently changing people need to perform tasks in a variety of functions. Hence special
roles and authorizations concept has been created for this purpose.. These roles and their respective tasks
allow us to manage the detailed authorizations and the workflow between those involved.

How to create a role :

1. Choose the transaction PFCG in the initial transaction SAP Easy Access. We go to the role
maintenance.
2. Specify a name for the role.

The roles delivered by SAP have the prefix 'SAP_'. Do not use the SAP namespace for our user roles.
We should adopt our own naming convention i.e. Z: or Y:
3. Click

to create a single role or

For Single Role :

The following screen appears :

to create a composite role.

1.Write the name of the role and give a short description of the role to be created.
2.Click the icon

to open the list of sap standard library roles.

3.We may give description in the long text or load a local file
4. Click

to open :

for description.

5.Click transaction to add transactions to that role.

6. Save the role by clicking
at the top.
7. Now click
to generate authorization profile.
8. Now click change authorization data to change any authorization related to that transaction.
The following appears:

9. Click utilities and select technical names on to select technical names of the various objects.
10.We can make the changes required at the object level .
11.Now click
we need to click

to generate authorization profile. The system will select a default profile name and
to generate.