Question:
hi guys
we are currently implementing 5.0, we need to create functional roles in dev from profiles SAP_ALL and SAP_NEW , how do i create a role from these profiles so that we can restrict few basis authorizations
Answer:
Enter a name in the Role field in role maintenance (transaction PFCG) and choose Create Role.
Do not assign any transactions; instead, choose Change authorization data on the Authorizations tab page.
A dialog box appears asking you to choose a template.
choose one of the required standard sap templates (SAP_ALL, SAP_NEW) and generate.
Answer:
2 other possibilities, especially for self-created profiles :
1) pfcg, in the change auth data screen: import the auths from profiles
2) su25 should allow to mass convert profiles to roles