SAP is pre-delivered with a number of role templates. These pre-defined role templates contain application functions, transactions, reports, user menus and authorization data. These role templates are a very good starting point fot analyzing and developing company specific roles and for implementing the authorization concept. There are various types of roles which are available in SAP. These include single roles, reference roles, derived roles, composite roles, and customizing role.

So how does the SAP consultant go about creating roles. The process of role creation and implementation in SAP is explained in a step by step manner below:

1. First and foremost, individual roles need to be created which contain the high level functions which are independent of organizational level. For individual roles, application specific restrictions do not apply and hence the same can be used for creating derived roles.

2. Now once the individual roles are created, an organization can go ahead and create dervied roles. The derived roles contain organization specific and application specific restrictions. A derived role can be created for each individual roles in an area.

3. Finally, composite roles need to be created which are a combination of the implemented individual and derived roles. The composite roles form the technical user roles for granting users access to the SAP system.

Related Posts

SAP Q & ADb
SAP NetWeaver Basic Concepts
SAP TMS Transport Management System
Change Documents in SAP R/3