What is SAP security roles?

Security roles are built based on positions/jobs for a group of users (e.g. Accounts Payable Clerk). • A single role contains the access to perform a job. • Transaction codes and authorizations typically duplicated in many roles.

What are the types of roles in SAP security?

There are basically two types of Roles:

  • Master Roles – With Transactions, Authorization Objects and with all organizational level management.
  • Derived Roles –With organizational level management and Transactions and Authorization Object copied from Master Role.

How do I assign a role in SAP security?

Assign a Standard Role to a User

  1. Choose Other menu in the initial transaction SAP Easy Access. …
  2. Choose a role or composite role from the displayed list of standard roles by double-click. …
  3. To assign the currently displayed role directly to one or more users, choose Assign user.

What is SAP job description?

SAP Business Analysts are generally responsible for evaluating, designing and implementing SAP (Systems Applications and Products) software programs for businesses in order to help them manage such areas as inventory, sales, production and marketing within a single program.

What are roles in SAP HANA?

Every user who wants to work directly with the SAP HANA database must have a database user with the necessary privileges. Although privileges can be granted to users directly, roles are the standard way to authorize users. A role is a collection of privileges.

IT IS INTERESTING:  Is Docker good for security?

How do I create a Pfcg role?


  1. In the SAP GUI, enter the transaction code PFCG to open the Role Maintenance window.
  2. In the Role field, type a name for the role. …
  3. Click the Single Role icon . …
  4. In the Description field, type a description. …
  5. Click the Authorizations tab.

How do I assign a role in SU01?

Goto transaction SU01 and click on change icon to change user details assign/ remove roles or profiles for a user. Navigate to the Roles tab as shown below and from the drop down select the roles that are to be assigned to this user. After assigning roles click on save to confirm the same.