How are authorization objects assigned to a tcode

[MichaelG258]

I have roles created for various jobs within our organization and use derived roles to limit transactions to a particular site. Each role has a mix of standard and custom tcodes. I have a user trying to launch a particular custom tcode and gets an error. When evaluating SU53, it shows the missing authorization is PFCG which the user does not and will not have. How is PFCG being associated with this code? Where else can I look to troubleshoot.

[JuergenPitz]

It can only be that there is no empty bin anywhere in your warehouse.

Gosh, why does every question somehow related to anything with "Basis" or "ABAP" gets tagged "EWM - Basis"? OK, the guy who ever came up with that tag, should not get dessert anymore for the rest of his life, but, come on, don't you ever wonder what the EWM stands for???

So, you have created roles in PFCG (I guess at least, that is where you usually create roles). Have you also created a profile for each role?

Brgds

Juergen