topic Re: authorization profile in Application Development and Automation Discussions

authorization profile

Former Member — Fri, 29 Feb 2008 07:11:11 GMT

Hi all,

I am new to security. i have got some questions.

what is a profile?

with profile what system does?what is its necessity

can anybody give me the guides for security.

Regards,

R.Suganya

Re: authorization profile

jurjen_heeck — Fri, 29 Feb 2008 07:20:03 GMT


> can anybody give me the guides for security.

All security guides can be downloaded from SAP service marketplace: service.sap.com/security. Look for "security in Detail" in the menu on the left.

Re: authorization profile

Former Member — Fri, 29 Feb 2008 13:19:44 GMT

The best sloution i can provide you is go through ADM940

you will come to know wat security is and ite related concepts.

Thanks

Re: authorization profile

Former Member — Sat, 01 Mar 2008 07:57:43 GMT

Hi Ranganathan,

hope this links can help you

http://web.mit.edu/its-alive/sap-docs/R3-SecGuide-Vol1.pdf

http://www.sap-img.com/basis/frequently-asked-questions-on-authorization.htm

thanks

kishore

Re: authorization profile

Former Member — Sun, 02 Mar 2008 00:18:54 GMT

Profile has the authorizations once a role is generated. Roles are just on top of profiles and when you assign the role to a user PFCG will actually assign the profile (w authorizations) to the user. I am sure there might be several threads reg this topic.so use the search option to get more details.

Re: authorization profile

Former Member — Mon, 31 Mar 2008 10:40:52 GMT

Hallo.

To grant the access rights of a authorisation to a user, you must assign the user to the role (or tho a profile, but sap recommend to a role). You can assign users using either the Profile Generator or user administration. Based on the transactions and reports selected for each role, the Profile Generator automatically determines all authorization objects required for performing the functions specified, and creates the corresponding authorization profile (in pfcg, with object evaluation of SU24).

Authorizations are assigned using profiles in the form of roles, which are

entered into the user master record.

There is a difference between Authorization and authorizatzion profiles generated: Authorization profile contains authorizations for different authorization objects, authorization objects contain different authorization controlled in the Transaction.

You create profile in pfcg after having saved the Rolle with his own authorization.

pfcg --> role create - role model and save - profile generate.

su02 --> see authorisation in profile.

Alberto

Re: authorization profile

Former Member — Thu, 03 Apr 2008 16:58:41 GMT

SAP profiles are operating system files that contain instance setup information. When an SAP instance is installed on a host using the SAP installation program R3INST , a start profile and an instance profile are automatically generated. If it is the first instance of an SAP System, the system also creates a default profile. Otherwise the existing default profile is simply updated.

If you refer to the link you can find steps to create a role assigned to a user using Tcode PFCG (Profile Code Generator)

http://e-mory.blogspot.com/2007/12/sap-pfcg-create-role.html

Hope this helps

Thanks