Difference between Roles and Profiles

Hi,
What is difference between Roles and Profiles?
Thanx in advance..
jitender

Hi,
It is a simple hierarchy level difference for grouping levels of authorization and the need avoid maintenance on a large number of individual authorizations on a user level.
In SAP, authorizations are grouped together into profiles. These profiles usually represent some sort of functional access (i.e. Create customer master records). The profiles can then be allocated roles which group the individual functional access into a more abstract level of a role (i.e. accounts clerk). Roles are then assigned to users based on their specific responsibilities.
More information is available on the help portal: http://help.sap.com
Cheers,
Mike.

Similar Messages

  • Difference between role and profile

    Hi All,
    I need to know the difference between role and profile. Kindly let me also know
    relevant T codes. Can Profiles exist without roles? If yes please let me know how to create them.
    Thanks in Advance,
    Kalyan

    Kalyan,
    A role is basically a container of authorizations and other related items.
    A profile contains the actual authorizations once a role is generated.  In addition a profile can be created from scratch using the classical method--transaction SU02.  Roles are created via transaction PFCG.
    Also take a look at the following threads:
    Difference between Role & Profile
    Re: difference between profile and role
    Cheers,
    Ben

  • Difference between roles and responsibilities of sd consultant?

    what is the difference between roles and responsibilities of sd consultant?

    Hi!
    "Roles and responsibilities" it is a term used by the consultant to tell about themselves. There is no difference between them. They co-related to each other. If you are given a ROLE for that certain RESPONSIBILITIES will be there.
    Hope you got cleared.
    Regards

  • Whant is the difference between role and group?

    in fact. a group means the a special role that have no any assigned functions

    Hi Kang
    The difference betwen Roles and Groups:
    <b>Roles</b>
    Roles are the largest semantic unit within the content objects. A role is a folder hierarchy comprising other content objects (worksets, pages, iViews). The contents of a role are based on the company structure and information requirements of the users of a company. Roles are assigned to users. This means that users can only access the content that is relevant for them if they have the appropriate role.
    <b>Groups</b>
    Groups contain users falling under the same catagory. For example let's say that you have a set of roles, <b>role x</b> and <b>role y</b>. You have to assign <b>role x</b> to users of <b>type a</b> (let these be users who can only view your portal and cannot make changes) and <b>role y</b> to users of <b>type b</b> (let these users be administrators). Then you can add the users of <b>type a</b> to a group and assign the <b>role x</b> to them. Similarly you can add the users of <b>type b</b> to another group and assign the <b>role y</b> to them. This rids you of the task of having to assign the two roles to each user type individually.
    Hope you got the difference now.
    Warm Regards
    Priya

  • Difference between roles and rules

    Hi,
        I like to know the difference between the roles and rules from basic..
    Pls do  the needful.

    Rules tells the object identification of the standard task.Many workflow systems allow for escalation rules to be built into the process, ie when a manager does not action a task it gets escalated via the workflow to another manager. If the escalation time frame is set to 5 days, you need to ensure your tests take this into account and the result might be longer test cycles.
    Tasks can be assigned to an organizational unit but the strength of the workflow system is to enable business rules which select users <b>according to the data being processed</b>. For example, you might have one group of users associated with one quality notification type. The workflow can be configured to query the QM module directly to determine the users. You can define fallbacks using the default role associated with a task and allow agents to be specified on the fly by a supervisor.
    Using workflow, one can manage various tasks or steps to be executed by different users (based on users or roles).An action can be assigned to user or to a role.The routing mechanism for work items uses roles and organizational assignments to determine who receives which work item.roles can be assigned to users while creating organization structure in ppoce.
    hope this information helps
    Neerja

  • Differences between Roles, Schemas, Users and Logins.

    I need differences between Roles, Schemas, Users and Logins. Can anyone help me. Thanks in advance

    Roles:
    I think of creating roles in the database to group users of like
    function.  Roles are granted certain permissions in the database.  You
    should become familiar with the fixed database roles since these will be
    utilized once you start creating users within the database.  Also, once
    you see the type of permissions that are granted to each role, is makes
    more sense.
    Schema: there can be several schemas in a database,
    which will house different types of objects such as tables, indexes,
    stored procedures, functions,  etc.  Users own schemas.  Looking into
    the AdventureWorks database illustrates this concept, with several
    schemas like HR, Production, etc.
    Login: Think about login as
    gaining access to the SQL Server instance.  If a user account is not
    granted any permissions within the instance, you basically just were
    able to unlock the door and enter the room, by creating a user you then
    grant access to the database objects or principals, and can begin to
    work with them. 
    Users:  Users own schemas, and as such will be
    able to manipulate the objects they own.  Some of the manunipulations
    are very permissive, such as creating tables, indexes, stored
    procedures, functions, etc.  These are developers and administrators.
    Users
    are created and granted permissions for application use, which will
    have select, update, insert, and delete and execute permissions  to a
    finite set of objects in the schema, for which the application will need
    to function properly.
    In a client server database, as an
    example, of the structure.  Roles were defined which provides the
    permissions to the database objects in the database, which only has one
    schema 'dbo'. One SQL server login was created with the same username,
    and dbo is the assigned default schema, and the roles assigned to that
    username. 
    In the application, each specific user is given there own
    "application" login which is mapped to the one defined sql server
    login.
    Ahsan Kabir Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread. http://www.aktechforum.blogspot.com/

  • What are the differences between tracing and hierarchical profiler?

    There are many terms used by people, I am just wondering what are the differences between tracing and hierarchical profiler? Aren't they the same thing?
    Thanks a lot.

    Instrumentation and tracing are two different things; in fact they belong to two different categories - one's a thing the other's an activity.
    Tracing is following the execution path of a program. Tracing shows us the the calls a program makes, perhaps the internal choices it makes (ifs and whiles), exceptions thrown, etc,
    Instrumentation is code we build into our program to produce a record of its status. There are different techniques, from using DBMS_APPLICATION_INFO calls to monitor status to writing log tables or files. Instrumentation can be used to generate a trace; it can do profiling; it can provide information reports on outputs and exceptions.
    In my opinion DBMS_TRACE and DBMS_HPROF are not instrumentation, because they are external to the program under investigation, rather than built into it. However, there is an obvious overlap between the insight they provide and what we might do with our own logging.
    Cheers, APC
    PS
    970992 wrote:
    you are not a stranger for me.Really? I don't believe we've met. I'm pretty certain I don't know anybody whose name is just a number.

  • Security Profiles - Difference between SYSTEM and TENANT admin user?

    Hi,
    In the OnDemand Enterprise workbook, some defualt security profiles have been configured.  This includes one called 'Tenant Admin'.   When I look in the system there is also a profiule called 'System Admin'.  Could somebody please explan the differences between system and tenant regarding these profiles?   I assume we shoul drarely use System Admin, and Tenant Admin is the safer option?
    Thanks
    John

    Hi,
    As you mentioned there are 2 status can be maintained for documents like Equipment Master, Notification, Maintenance Order & other important business documents.
    In case, client feels that system status is not enough to capture the details of the object, then user status can be used.
    System statuses will be updated automatically based on business transactions which will be done on SAP.
    For example, once the equipment is created, System status would CRTD (Created). If you install the same to some superior equipment or FL, then status would be INST (Installed).
    If you keeping that equipment in Spare, then for that, you have to maintain separate User Status like AVLB (Available in Stock / Spare) so that through IH08, by using User status, you can the report which is available as spare.
    These user status as per the name, should be updated by the user manually.
    Regards,
    Maheswaran.

  • What is the difference between generate partner profile and creat partner

    What is the difference between generate partner profile and creat partner profile ?

    Create Partner ProfilesAlthough partner profiles are usually created automatically, because of the unusual inbound and outbound profiles needed on the same system, the manual generation of certain profiles is required.
    The following subsections describe the partner profile settings for the standard client (assumed here to be ALExxxCyyy), as well as for the corresponding dummy client (assumed to be DUMxxxCyyy). The dummy client partner profiles should have been generated by the automatic generation process completed previously. Nevertheless, these should be checked to ensure that all profiles exist.
    Generation of Partner Profiles
    The following messages should be added to the 4xx-ORDR model for ALExxxCyyy to DUMxxxCyyy on the reference client:
    • ORDERS
    • ORDCHG
    • ZINVRV
    • ORDRSP
    • INVOIC
    • FIDCMT
    • The partner profiles should first be generated using the standard auto-generation procedure on the reference client (for SYNCH messages to be created).
    • This model should now be distributed to the both ALExxxCyyy and DUMxxxCyyy.
    • The partner profiles should now be generated on the client being configured (i.e. yyy) using the auto-generation procedure defined in the standard ALE configuration procedures.
    Generate partner profiles for sending system. (Can only do this if at least 1 message type exists against the sending system's LS). This automatically generates the port if the LS and RFC name are the same.
    generate partner profiles tcode BD82
    creating partner profiles tcode WE20
    &#61550; There are two methods for maintaining the partner profile:
    &#61664; Maintain partner profile manually:
    To navigate to the partner profile in the sender system, choose Partner profile -> Partner type of Logical System and click on the required Target system. Under Outbound parameters, choose the Create outbound parameters icon, and enter the values for the outbound parameters according to the slide Sender: Partner Profile (outbound).
    To navigate to the partner profile in the sender system, choose Partner profile -> Partner type of Logical System and click on the required Sending system. Under Inbound parameters, choose the Create inbound parameters icon and enter the values for the inbound parameters according to the slide Sender: Partner Profile (inbound).
    &#61664; Generate partner profile:
    Prerequisite: The current distribution model is distributed to all participating systems.
    In the sender system, choose: Generate Partner Profile, then check the result in the partner profile (outbound)
    In the sender system, choose: Generate Partner Profile, then check the result in the partner profile (inbound)
    Regards
    Vasu

  • Difference between Groups and roles?

    Hi All,
    What is the difference between groups and roles?
    Thanks for your time and help.

    Oracle does not have anything called a 'group'.
    A role is a named object that can contain a set of privileges. The members of the set can be individual privileges or can be another role that contains its own set of privileges. Roles can then be granted to users (or to other roles) so that those users (or roles) have the specified privileges.
    See the SQL Language reference - http://docs.oracle.com/cd/B28359_01/server.111/b28286/toc.htm
    Read the topics for CREATE ROLE, GRANT and REVOKE

  • Difference between roles Administrator and Super admin

    Dear Portal Gurus,
    Pls let me know the difference between
    roles Administrator and Super admin
    Thanks.
    Jack

    Hi Jack,
    The Administrator is the role that has all the rights that includes J2ee engine rights too but an superadmin is the one that has the role to the three admin roles that are
    Content Admin
    User Admin
    System Admin
    THIS IS THE BASIC DIFFERENCE BETWEEN SUPERADMIN AND ADMINISTRATOR.
    PS:Reward Point Please
    Regards,
    Naveen Gupta

  • After BI 7.0 Upgrade, Roles and profiles are not visible

    Hi Gurus,
                                  We have issue with the roles and profiles, all our users doesnt see any roles or profiles in Bex Analyzer, under there user access after BI 7.0 Upgrade. 
                                   When I go and check there profile in SU01 and I can see all roles are assigned but not able to see in the Bex Analyzer reporting tool.
                                   Do we need to do any configuration settings after BI 7.0 upgrade to visible roles. This problem with every user.
                                   Your help will be really appreciated.
    Thanks
    Ganesh Reddy.
    Edited by: Ganesh Reddy on Oct 22, 2009 5:19 PM

    Hi Mohan/Vijay,
                            Sorry for little bit late. I have all authorization roles access, and users dont have that access. Difference between our roles is I have SAP_ALL and SAP_NEW.
                            But when they login with old bex analyzer they can see all roles, but not with new bex analyzer.
                            Please some suggest me still I need to run SU25.
    Thanks
    Dayaker Reddy.
    Edited by: Ganesh Reddy on Oct 26, 2009 10:19 AM

  • Roles and profile in SAP

    what is role and profile in SAP?
    how we can diffferentiate both?

    Hi Swati,
    Role refers to the collection of associated activities (privilages) such as transactions, reports and so on. There are 2 types of Roles, Standard Role and Derived Role. While profile is a set of authorizations that are valid for the transactions defined in that role. Roles contain no actual access. They contain a role menu composed of transaction codes. These transaction codes are then mapped into the profile automatically by profile generator. When a role is generated (once created) the profiles are created automatically by profile generator. Every transaction code is different and may require different numbers of accompanying authorization objects to execute. A single profile can only contain 150 authorizations.  Once that number is exceeded the profile generator will automatically create a second profile, sorted alphabetically by object name.
    Please refer the below links:
    The specified item was not found.
    Re: difference between profile and role
    Difference between Role & Profile
    Regards,
    Sreedhar

  • Difference between Null and null?

    What is the difference between null and NULL?
    When is each used?
    Thanks,

    veryConfused wrote:
    There is a null in java, but no NULL. null means no value. However, when assigning value, the following is different:Although the empty String has no special role. Null means, the referential type is not assigned (doesn't refer) to a specific object. The empty String is just another object though, so seeing it or pointing it out as something special when it actually isn't at all (no more special than new Integer(0) or new Object[0]) just adds to the confusion.

  • Difference between AR and RA

    difference between AR and RA tables in Account Receivables???

    Hi,
    each table in RA_ /AR_ stores different info.
    lets suppose Customer profile RA_ contains interface table. and those details
    are available in AR_ tables.
    So it depends on each table in AR & RA.
    --Basava.S                                                                                                                                                                                                                                                                                                                                                                                                                                                   

Maybe you are looking for

  • How to create the OSB artifacts in JDeveloper

    The docs I've seen get me a little closer in being able to test the DB and AQ Adapters on the OSB, but it really does not help me understand how to do it through JDeveloper. In the past we have done all of the OSB development in Eclipse and then impo

  • How to get data from SOAP-Header/MAIN-Section?

    Hi, I need some data of the SOAP-Header-MAIN-Section, e.g. <SAP:Sender><SAP:SERVICE> Is it possible to get these data with XSLT-Mapping or Java-Mapping? Are there blogs about it? I need these data of the MAIN-Section inside the condition of the recei

  • Cube - number of records

    Hi everybody, how can I check the number of records in a Cube to some selection e.g. Fiscal Year 2010. Regards Erwin

  • Matrix report printing problum

    hi every body i use report 6i and i create a matrix report this report print on horizantily half page and right side half page remain vacant for the purpose to save the no of pages i want to print this report in double panel the next page data print

  • I am getting an error

    When i enter the values in the form and press the apply button. I get the following error: Row 1 Error - Row validation method failed for row with key oracle.jbo.Key[445 ] in CustomerAM.CustomerVO1 when i press apply again i get this error: Error ora