Assigning Role and Profile to user in SAP

  ROLE :  A role in SAP is a collection of activities that a user can perform. These activities are defined by transactions, reports, and web-based applications that the user needs to do their job.

Roles are created and maintained using the SAP transaction code PFCG (Profile Generator).

Go to Tcode SU01.

Type username in user box and click on pencil icon to edit the user. here I'm using ArbazAli as user.

Click on role tab in menu.

                                               

                                                   

click on Red arrow to add/ role name.

Here I'm using my own role Y:ABZ_SAP_ALL_AUTH which I have created via PFCG Tcode.

 Click on green tick to search role.

select the role clicking in blue tick and then click the green tick button.

The role is Y:ABZ_SAP_ALL_AUTH is added.

now save the Role clicking on save Icon.

Profile

A profile is a component that contains authorization data and is generated from roles. Profiles are directly assigned to users to grant them the necessary permissions.

Generated Profiles: Automatically created when roles are generated.

Manual Profiles: Created manually using transaction code SU02. This method is less common and typically used for very specific needs.

Click on profile tab.

Click on red arrow field to add Profile names.

Type Profile name and click enter. here I'm using SAP_ALL and SAP_NEW profile.

SAP_ALL is a profile that provides full access to all SAP system functions and data. It grants every possible authorization in the SAP system.

SAP_NEW is a profile that includes all new authorizations that have been introduced in a particular SAP release or upgrade.

After assigning profiles to user save the User by clicking on save button.