Roles and profile in SAP

[Former Member]

what is role and profile in SAP?

how we can diffferentiate both?

[sreedharreddy_hosamane2]

Hi Swati,

Role refers to the collection of associated activities (privilages) such as transactions, reports and so on. There are 2 types of Roles, Standard Role and Derived Role. While profile is a set of authorizations that are valid for the transactions defined in that role. Roles contain no actual access. They contain a role menu composed of transaction codes. These transaction codes are then mapped into the profile automatically by profile generator. When a role is generated (once created) the profiles are created automatically by profile generator. Every transaction code is different and may require different numbers of accompanying authorization objects to execute. A single profile can only contain 150 authorizations. Once that number is exceeded the profile generator will automatically create a second profile, sorted alphabetically by object name.

Please refer the below links:

Regards,

Sreedhar

[former_member285936]

Hello,

Roles are logically assigned to users to give the newer functionality of Roles (Menus etc), but profiles are assigned to give the authorizations.

1.profile is a set of authorization objects, but a role is a set of profiles.

2.In a profile we can add up to 150 authorization objects, but in role there is no limit.

3.Profile can not be manually editable, but role can be manually editable.

4.In a profile we can not create the user menu, but in role we can create the user menu.

5.profile is the subset of role, but role is not the subset of profile.

6.profile can be created only for the transaction codes, but in role we can add tcodes,web addresses,and reports etc.

Regards,

Varenyam Trivedi

[Former Member]

Hi Swati,

Roles and profiles are to provide access. When you create roles it will generate the profile automatically.

Roles contains transaction code while profile will hold the values. i.e. Roles work as a wrapper to profile.

Roles are easy to manage. Also you can have flexibility in creating composite roles.

Regards,

Pinkle