1. Goto tcode PFCG and enter your role name as per your company
naming convention and click single role button along with short description
2. Enter detailed description for role in the description tab
like below and save it
3. It should have details like who created and when its created
and what are the authorizations are available in the role, so it will give
clear idea about role purpose and it can be easily understandable by new
security consultant
4. Goto Menu tab and enter the tcode which you need by clicking
Transaction button
5. Click “Assign Transactions” button and now your Menu tab
status will turn to green color
6. Now goto Authorizations tab and click Hand icon to create
profile name automatically along with description
7. Now save the changes and click “Change authorization Data”
option to get authorization mapping screen like below where you can add/maintain
authorization objects/tcode/company codes etc.
8. Now click the circular button to generate the profile
9. Now your Authorizations tab status will turn to green color
10. Now we have successfully created a role and now assign the
role to required users, once you assigned the role to users and “Users” Tab
status will turn to green color
Do user master comparison if the status light is yellow
color and will turn to green color
Hope this will be helpful for you.
