Profile Creation using Tcode "PFCG" in SAP

SAP PFCG Create a role

PFCG is the transaction used for creating or maintaining roles in SAP. PFCG is also called profile generator, is a powerful tool that allows the security administrator to quickly build security roles by first building a menu of transactions that instruct the profile generator to bring in authorization objects that you then maintain authorization values for based on the requirements you are trying to meet.

While this discussion is focused on PFCG, it is hard to discuss PFCG without mentioning SU24. SU24 is the configuration transaction for PFCG. Using SU24, you can control what authorization objects are included in a role every time you place a transaction in the role’s menu. We will discuss this later.


Steps for PFCG:

Step 1:Go to Tcode PFCG.

Step 2: Enter New Profile Name you want to create.

Step 3: Click "Single Role or Comp. Role" button.

 Step 4: Describe the Role in "Description" field

 Step 5: Click "Menu" tab.

 Step 6: Add transactions for authorization
Step 7 :Click Button "Assign Transactions".
Step 8: Click Authorization Tab.

 

Step 9: Click "pencil" button to change authorization.
Step 10: Put "Org element value". And Save.

Step 11:  Check for Missing Authorizations.

Step 12: If you find any missing Autho. then click as above to give full authorization. Save the Role. Click on Generate authorization.
Step 13: Click on User Tab ti assign given roles to users. and click user comparison to compare users.

 

Step 14: Then Save this profile.