Administration Using the Profile Generator

If you are using the Profile Generator, you can automatically generate authorization profiles based on selectable R/3 transactions. You can generate this type of profile based on templates for administrators.

For reasons of system security, you should divide up system administration tasks between different administrators as displayed below.

The superuser sets up user master records, profiles and authorizations for administrators in one or more areas.

An area may be a department, a cost center or any other organizational entity.

Within an area, administration tasks are divided among three administrators.

User administrators have the following tasks and authorizations:

The following tasks are not permitted:

Authorization data administrators have the following tasks and authorizations:

The following tasks are not permitted:

Changing users

Generating profiles

Authorization profile managers have the following tasks and authorizations:

The following tasks are not permitted:

Changing users

Changing activity group data

Generating authorization profiles containing authorization objects beginning with S_USER.

To assign administration tasks to the various users see Setting up Administrators.