In this tutorial I’ll show you how to create a new SAP Single Role. As part of Basis jobs is to maintain SAP Security and Authorization, you need to know about SAP Role Administration.
Below are the steps to create a new SAP Single Role:
1. From SAP Menu -> Tools -> Administration -> User Maintenance -> Role Administration, or call transaction code PFCG directly.
![How to create SAP Single Role](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-001.jpg?resize=235%2C400) |
SAP Role Administration |
2. Enter your Role Name and choose Single Role, and enter the description if needed.
![create SAP Role](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-002.jpg?resize=400%2C130) |
Create a new SAP Single role |
![SAP Role description](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-003.jpg?resize=400%2C320) |
SAP Role description |
3. On next screen you can choose to fill your Role with Transactions or Report. In this example choose “Transaction”.
![create SAP Role](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-001-c.jpg?resize=400%2C211) |
Choose your Role menu |
![create SAP Role](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-005.jpg?resize=296%2C320) |
Avalaible Entries for SAP Role |
4. Now fill with the transactions that you want to assign in the Role.
![Assigned SAP transactions for Role](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-007.jpg?resize=400%2C348) |
Assigned SAP transactions |
Make sure the transactions are assigned, and click “Authorization” Tab
![Assigned SAP transactions](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-008.jpg?resize=400%2C177) |
Assigned SAP transactions |
5. Click “Change Authorization Data”. You can also choose “Expert Mode”
![](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-009.jpg?resize=400%2C267) |
Edit SAP Authorization |
![](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-001-a.jpg?resize=400%2C128) |
Expert Mode Edit SAP Role |
6. Maintain all necessary values.
![](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-010.jpg?resize=400%2C245) |
Maintain SAP Authorization values |
![](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-011.jpg?resize=400%2C240) |
SAP Authorization values are maintained |
7. Now you generate profile for newly created SAP Role. Go to menu Authorization -> Generate
![](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-012.jpg?resize=200%2C195) |
Generate SAP Authorization Profile |
You’ll be prompted a profile name.
![](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-013.jpg?resize=400%2C101) |
Authorization Profile |
8. Your new SAP Single Role is created and ready to be assigned at user.
![SAP Single Role creation](https://i0.wp.com/www.sapbasiseasy.com/wp-content/uploads/2013/05/SAP-Role-Administration-014.jpg?resize=400%2C317) |
SAP Role created |
To get complete reference about SAP Authorization concept I recommend this book for your additional reference:
[amazon-element asin=”1592293425″ fields=”lg-image”]
1 thought on “How to create SAP Single Role”