The following SAP Security training tutorial guides you on how to create composite roles in SAP step by step. In our previous training tutorials we have learned about how to create single roles and derived roles.
The Role is used to choose the menu and create a particular authorization profile. The SAP system provides standard roles to use, however you can define new roles in the SAP system as per the requirements of an organization.
You can maintain composite roles in SAP systems by using one of the following navigation methods.
- SAP Menu Path: – SAP Menu –> Tools –> Administration –> User Maintenance –> Role administration –> Roles
- Transaction code: – PFCG
How to Define Composite Roles in SAP
In this scenario, we are going to define composite role Z_Composite_Roles.
Step 1: – Enter transaction code “PFCG” in the SAP command field and enter.
Step 2: – On the role maintenance screen, update the following fields.
- Update the composite role id in the role field
- Click on the composite role tab to create new composite roles in SAP.
Step 3: – In the next screen, update the following details.
- Update the descriptive text of the composite role
- Enter the descriptive long text of the composite role.
- Click on the save button and save the data.
Step 4: – Next click on the menu and update all the single roles that you want to assign to the role, that’s how we create the composite role.
Step 5: – Click on the Users tab and update users that you want to assign to roles, then click on user comparison. Press yes to continue.
Step 6: – Now click on the menu and right click on the role and open the folder as shown below.
No menu is available, so click on menu options and select menu options as per your requirements.
Now click on the import menu icon to copy the menus
Click on the save button (Ctrl+s) and save the configured composite roles data.