Security & GRC
What is PFCG Role?
An SAP role created in the profile generator that bundles menus, authorizations, and generated profiles for users.
Roles are single, composite, or derived. Generated profiles contain the actual authorization values. Role changes are transported and must be retested.
Related transaction codes
Related terms
Composite Role
A PFCG role that groups multiple single roles so they can be assigned together.
Derived Role
A PFCG role that inherits menus and authorizations from a master role while setting its own organizational values.
Authorization Object
A definition of up to ten fields, such as activity and company code, checked by programs to permit actions.
Business Role
An SAP-delivered or custom role template, such as SAP_BR_AP_ACCOUNTANT, that bundles Fiori catalogs and spaces for a job function.
More in Security & GRC
Planning an S/4HANA move?
Read the field guides on testing an ECC to S/4HANA migration and grab the free template library.