Single Role creation using PFCG in SAP Security


Creating Single Role:
  •   Hit the T_Code PFCG
 
  •  Enter a name for the role and click on Create Role button
(Note: You should note that the roles supplied by SAP begin with the prefix "SAP_". If you are creating your own user roles, do not use the SAP namespace. Start with either Y or Z)



  • Give Description (contains 61 characters only) & also enter Long text if needed


  • Click on Menu tab


  • Click on Transaction button.
  • Enter the T_Codes which we want to include in this role & Click on Assign transactions button.
    We will get information that how many transactions we have addedin this role.




      click on Authorizations Tab


   
Expand the Required Authorization Objects &provide authorization field values(Activity Values) under upropriate Authorization fields


After providing all the values under fields you need generate the profiles.profiles contains exact Authorizations.
Now click on generate button .









Now we will assigne this role to users using su01 Tcode