How do I use Pfcg?

How do I use Pfcg?

Procedure

1. In the SAP GUI, enter the transaction code PFCG to open the Role Maintenance window.
2. In the Role field, type a name for the role.
3. Click the Single Role icon .
4. In the Description field, type a description.
5. Click the Authorizations tab.

What are the roles in SAP?

There are basically two types of Roles:

• Master Roles – With Transactions, Authorization Objects and with all organizational level management.
• Derived Roles –With organizational level management and Transactions and Authorization Object copied from Master Role.

What is SAP Authorisation object?

An authorization object consists of up to 10 authorization fields. Combinations of authorization fields, which represent data and activities, are used to grant and check authorizations. Authorization objects are grouped together in authorization object classes. They are edited in transaction SU21.

What are dialog users in SAP?

1) Dialog user (A) This is used to logon using the SAP GUI. During a dialog logon, the system checks for expired/initial passwords. The user can change his or her password. Multiple dialog logons are checked and, if appropriate, logged. These users are used for carrying out standard transactions.

How do I assign a role to Pfcg?

PFCG: Steps to Create Customize Role and Assign Authorizations to User

1. Enter the role description and press on Save.
2. Go to the Menu tab.
3. The Menu screen will listed all the granted transaction codes.
4. Next, go to Authorization tab.
5. On the Change role: Authorizations, verify if there are any missing values.

How do I add Auth object to role?

Key in the Role name and press on Change. Go to Authorizations tab and click Change Authorization Data. Enter the required Authorization object. You can insert multiple authorization object at one time.

What is the difference between single role and composite role in Pfcg?

Users who are assigned a composite role are automatically assigned the associated single roles during the compare. You can create a composite role and assign it to the users instead of putting each user in each required single role. 1. Enter a name in the Role field in the role maintenance (transaction PFCG).

What is SAP role profile?

Roles are combination of transactions and authorizations which are stored in Profiles. It is depend on the number of transactions and authorizations contained in the Role. Whenever you create and generate a role, it will automatically create a profile.

How does authorization work in SAP?

An authorization enables you to use certain functions in the SAP System. Every authorization relates to an authorization object and defines a value or values for each authorization field contained in the authorization object. Authorizations are grouped into profiles that are entered in the user master record.