Why profile is needed?

[Former Member]

Hello,

I need clarification between roles and profiles.

As i know, profiles can not be assigned to the users direclty. Only roles can be assgined to the users, only then the corresponding profiles will be assigned.

However we can assign SAP_ALL profile to a user.

If profiles cannot assigned to the user, what is the use of having profiles in the system?

Can anyone help me in understanding difference between roles and profiles???

Thanks and Regards,

Radha

Edited by: Radha Sandur Kustigi on Nov 26, 2009 6:16 AM

[Former Member]

Hi Radha,

Role refers to the collection of associated activities as transactions, reports and so on.While profile is a set of authorizations that are valid for the transactions defined in that role.

Role has various components as MENU of transaction, reports, urls, USERS etc who are assigned to that role.Roles are otherwise called Activity Groups.

Profiles are the component of the older SAP releases, this was not replaced in the newer versions but a new layer was

placed above Profiles, Roles. Profiles are therefore a subcomponent of Roles, they have a one to many relationship. Profile contains the authorization data that limits the access assigned to a user.

In recent version thus there is no difference between roles and profiles. Whenever a role is created a profile is generated automatically. SAP_ALL and SAP_NEW are composite profiles that can be assigned to a super user with all authorizations.

For more info on roles and profiles please check the link given below:

http://help.sap.com/saphelp_47x200/helpdata/en/e1/8e51341a06084de10000009b38f83b/frameset.htm

good luck

rasheed

[former_member126659]

Hi Rasheed,

If profiles are created automatically, does chanages to the role will be included in the profile??

If so, what is the trascation to see the profiles and changes done to the role?

Regards,

Radha

[Former Member]

Hi Radha,

Yes whenever you a do any changes in the authorization data portion of the role i.e whenever you maintain the authorizations of the role and save, the profile generator will automatically ask you to generate the profile.

you can view the profiles by there name or by the name of the role assigned to them or by various other selection criteria using the information system transaction SUIM.

Check this tCode and post a reply in case any issues.

Good Luck

Rasheed

[Former Member]

Role and profile go hand in hand. Profile is bought in by a role.

Role is used as a template, which contains a combination of T-codes, Reports.... which inturn creates a profile ..... Profile is one which gives the user authorization. When you create a role, a profile is automatically created. 100 authorizations make a profile

Authorization profiles give users access to the SAP System. They contain authorizations, which are identified using the name of an authorization object and the name of an authorization. If a profile is specified in a user master record, the user is assigned all of the authorizations defined in this profile.