Difference between profile and role

Can any explain me the difference between profile and role.
I was given a user Id on ABAP stack of XI.
My profile: SAP_ALL
I was not assigned any roles.
I am not sure if I need different roles or this profile
would serve the purpose.
-Naveen.

Hi Naveen,
Adding to Gus points a few more inputs.
Profiles were the menas of assiging authorizations to users until 4.0 Versions.
Later to the same it was upgraded to the concept of Roles. The crux always remains the same.
Be it a profile or a role, it contains the Auth Object and the respective values.
But in present scenario, you can get confused by the profiles that are assignable to Users.
IN short the following points can be helpful.
1. The profiles like SAP_ALL;SAP_NEW,S_SPO_ALL etc are standard Profiles delivered by SAP which when assigned to a user in his profile in SU01 would get all the related authorizations.
( You must be lucky to have SAP_ALL assigned to ur ID by ur basis guy)
2. A role is created by assigning a few transactions to this role and when this role is generated, it generates a PROFILE. But this profile is a system generated one and cannot be ever assigned to any user. These profiles can be sorted out as they have the standard naming like T-XXXXXXXX where they are the numbers and it can never be assigned to any user.
3. Note prior to 4.0 its all Profiles that are assigned to users and later to the same came the concept of Roles and hence this change.
Hope the answer is helpful in making u undersand a few inputs form my side.
FYI:
Method to create a role can be checked out from the link below.
http://help.sap.com/saphelp_bw21c/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
Br,
Sri
Award points if answer is helpful.

Similar Messages

Difference between Groups and roles?

Hi All,
What is the difference between groups and roles?
Thanks for your time and help.

Oracle does not have anything called a 'group'.
A role is a named object that can contain a set of privileges. The members of the set can be individual privileges or can be another role that contains its own set of privileges. Roles can then be granted to users (or to other roles) so that those users (or roles) have the specified privileges.
See the SQL Language reference - http://docs.oracle.com/cd/B28359_01/server.111/b28286/toc.htm
Read the topics for CREATE ROLE, GRANT and REVOKE

Difference between ID and Role based Administration - Firefighter 5.3

In GRC AC 5.3 Firefighter, security guide, there are two sections for role design,
1. Firefighter Role based Administration
2. Firefighter ID based Administration
Can someone explain what is the difference between the two?
I have read the documentation, but it does not have a clear description of the
differences between the two.
Please help.
Thanks

HI Prakash,
Though both of them eventually achieve the same function, that is giving access rights to the user for a certain period under monitring these differ based on the following:
1. Firefighter Role based Administration
You identlfy a particular role as a firefighter role and give it to the user.
2. Firefighter ID based Administration
You create a separate user altogether and give the normal dialog user, the access to this user's authorization.
For the implication that both of these have and the differences or comparisons between using 1 & 2, I would suggest you do a bit of Mock testing for both of these. Also, there are a lot of posts related to this on the forum already, which you can refer to, for getting a more detailed idea on this topic. Unlimately, it depends on organization to organization which methodology they folow as per what suits them, according to features which both have. But generally what is preferred is Number 2.
Regards,
Hersh.

What are the differences between tracing and hierarchical profiler?

There are many terms used by people, I am just wondering what are the differences between tracing and hierarchical profiler? Aren't they the same thing?
Thanks a lot.

Instrumentation and tracing are two different things; in fact they belong to two different categories - one's a thing the other's an activity.
Tracing is following the execution path of a program. Tracing shows us the the calls a program makes, perhaps the internal choices it makes (ifs and whiles), exceptions thrown, etc,
Instrumentation is code we build into our program to produce a record of its status. There are different techniques, from using DBMS_APPLICATION_INFO calls to monitor status to writing log tables or files. Instrumentation can be used to generate a trace; it can do profiling; it can provide information reports on outputs and exceptions.
In my opinion DBMS_TRACE and DBMS_HPROF are not instrumentation, because they are external to the program under investigation, rather than built into it. However, there is an obvious overlap between the insight they provide and what we might do with our own logging.
Cheers, APC
PS
970992 wrote:
you are not a stranger for me.Really? I don't believe we've met. I'm pretty certain I don't know anybody whose name is just a number.

Security Profiles - Difference between SYSTEM and TENANT admin user?

Hi,
In the OnDemand Enterprise workbook, some defualt security profiles have been configured. This includes one called 'Tenant Admin'. When I look in the system there is also a profiule called 'System Admin'. Could somebody please explan the differences between system and tenant regarding these profiles? I assume we shoul drarely use System Admin, and Tenant Admin is the safer option?
Thanks
John

Hi,
As you mentioned there are 2 status can be maintained for documents like Equipment Master, Notification, Maintenance Order & other important business documents.
In case, client feels that system status is not enough to capture the details of the object, then user status can be used.
System statuses will be updated automatically based on business transactions which will be done on SAP.
For example, once the equipment is created, System status would CRTD (Created). If you install the same to some superior equipment or FL, then status would be INST (Installed).
If you keeping that equipment in Spare, then for that, you have to maintain separate User Status like AVLB (Available in Stock / Spare) so that through IH08, by using User status, you can the report which is available as spare.
These user status as per the name, should be updated by the user manually.
Regards,
Maheswaran.

Differences between .profile,oraenv and dbhome files

can anyone tell me the differences between .profile,oraenv and dbhome.
database version is 10.2.0 and OS is solaris 10.
I have set up the environment variables using .profile
is the functionality of oraenva and dbhome same like .profile?

Hello,
oraenv and oracle home_
The oraenv and coraenv utilities both aid in setting the Oracle environment on UNIX systems (other utilities exist on Windows platform that enable the Oracle Home to be set.) The coraenv utility is appropriate for the UNIX C Shell; oraenv should be used with either the Bourne or Korn shells.
Database operations require the ORACLE_HOME to be set before the user may access the database. If ORACLE_HOME is not set, commands such as sqlplus, exp, or any other utility for that matter, will not be found.
Both utilities are shell scripts that do the same thing in the different UNIX shells. They will prompt for a SID of the database unless ORAENV_ASK is set to N. The utility will also append the ORACLE_HOME value to the path, marking the location of the utility.
The oraenv command will prompt for the SID of the database that you wish $ORACLE_HOME to access.
$ . oraenv
ORACLE_SID = [] ? ASG920
The dbhome utility can now be used to verify that $ORACLE_HOME is correct.
$ dbhome
/usr/oracle/9.2.0
The “dot space” part of the command is required to make the environment change with the parent shell, as opposed to entering a command without it which would only affect the subshell running that process.
These commands can be used to avoid specifying the network service name when issuing commands. For instance, without using oraenv, a sqlplus command would look like:
$ sqlplus system/manager@nameofservice as sysdba
whereas after oraenv has been executed, the following command would work:
$ sqlplus system/manager as sysdb
The profile:_*
The Profile file in your home directory is a collection of Korn shell commands that are executed whenever you login. Commonly, the Profile file is used to set environment variables and shell options. You can also put command aliases in your Profile file, but it's better to put them in a separate file -- commonly called .env (which is pronounced: dot-e-n-v)-- that you define and execute in your Profile (which is pronounced: dot-profile).
This document briefly introduces environment variables, shell options, and aliases, and gives sample Profile and .env files.
The commands in this document assume that you're using Korn shell, which is the default login shell on all the ACCC UNIX machines. Shell variables (like $PRINTER and $ENV, which are introduced below) are defined slightly differently in C shell. For example, to select the U-Print system as your default printer in csh you'd use the printer named uprint:
PRINTER uprint
setenv PRINTER

Difference between Null and null?

What is the difference between null and NULL?
When is each used?
Thanks,

veryConfused wrote:
There is a null in java, but no NULL. null means no value. However, when assigning value, the following is different:Although the empty String has no special role. Null means, the referential type is not assigned (doesn't refer) to a specific object. The empty String is just another object though, so seeing it or pointing it out as something special when it actually isn't at all (no more special than new Integer(0) or new Object[0]) just adds to the confusion.

Difference between AR and RA

difference between AR and RA tables in Account Receivables???

Hi,
each table in RA_ /AR_ stores different info.
lets suppose Customer profile RA_ contains interface table. and those details
are available in AR_ tables.
So it depends on each table in AR & RA.
--Basava.S

What is the difference between upgradation and migration.

Hi Guru's
what is the difference between upgradation and migration.
actuallly i involved in upgradation project, here my role is
1. first i check the query's in 3.5 save the query and transport the query. and check the query in bex analyzer also.
2. go to BI .7 find the query;s ,give the query name and save the query ,
3. once save the query, again will come to 3.5 open the query , it will not open. this is my job here,
come to 7.0 check the query in analyzer also.
i am having littile bit confusion, how it will comes query in 7.0, why are u saving the query's in 3.5 and 7.0
query's already available in 7.0 why are u doing this work?
can i know the upgrades those objects, is it neccessary, if necessary how can i upgrade.
infoobje , transferrules, transferstructure ,infosoure, datasoure,updaterules, ods, cubes.
Points will be Assingned ,
Thanks & Regards
prabhavathi

Hi,
I was talking in a general sense not on a query level.
If your taling about migration in that level meaning as a part of larger upgradation (in your case 3.x to 7) there may be many places where you need to do this kind of activities.
Fr eg migration into new data flow, Migration of Web templates from BW 3.x to Netweaver 2004s, etc
Hope this helps.
Thanks,
JituK

Difference between tRFC and RFC

Hi Experts,
Can any one help me in details to differentiate tRFC from RFC in their application perspective.
And also let me know the role of ALE and BAPI in both the connection log.ie,Where we have to use ALE and BAPI.
Regards
Kumar

Hi,
RFC = Remote Function Call and TRFC = Transactional Remote Function Call
Transactional RFC and Queued RFC are variants of the Remote Function Call that make the data transfer between different SAP R/3 systems more reliable and more secure.
Transactional RFC
http://help.sap.com/saphelp_nw04/helpdata/en/8b/ceea3b31aac554e10000000a114084/content.htm
RFC Help link
http://help.sap.com/saphelp_nw04/helpdata/en/b0/eae2a889e711d2956500a0c94260a5/frameset.htm
Refer BAPI & ALE
what is difference between BAPI and ALE
Re: ALE & BAPI communication
Re: bapi-ale interface
/Srinivas

Differences between C350D and C350

Hello,
what is the differences between C350D and C350?
Thanks

Hi There,
C3x0D was designed as an outbound only box, the idea being that your internal servers would send mast amounts of mail to the C3x0D and we process and deliver.
The main differences are:
1: Multiple IP Interfaces
Deliver from 256 source addresses to minimise rate limiting issues
2: Configurable Source IP per destination
Nominate specific source IP for certain destinations
3: Virtual Gateways
10,000 Concurrent connections, delivery queue per destination
4: Domain Key signatures
Validate you are the trusted source of the mail
5: Destination Controls
Control delivery rates to suit ISP acceptance policies
6: Configurable Bounce profiles per destination
Customize retries and delay periods for differing destinations
7: Message and Content Filters
Apply disclaimers, unsubscribe information and tracking headers
8: Optional Sophos engine
Ensure clean mail only is sent
More information on the support portal regarding C350D, or messenger me and I will send you the pdf.
Laters :)

Differences between BDC and LSMW

Hello SAP Gurus,
Kindly let me know the various differences between BDC and LSMW.
Also, please tell me the STEPS of the CUT-OVER PLANNING (Shifting of Data from the Legacy System to the SAP System). Here, the "Data" means which data? Please explain in details.
Looking for your early feedback.
Regards,
Kaushik.

Hi,
BDC- It is Batch data communication. Its used for data conversion from legacy system to SAP system. Only technical people can do it. Tcode is SHDB.
LSMW- It is legacy system migration workbench. Its also used for data conversion from legacy system to SAP system. But it is role of functional consultant.
There are 14 steps in LSMW. As soon as you complete the one step, automatically it will go to next step.
In general you can use LSMW. But if you want to transfer more than 40,000 data, then it is not possible in LSMW. That time you can take help of BDC.
Cutover strategy depends upon how the organizations design their data load strategies. Normally, you decide the sequence of Data loads for Configuration settings, Master data, Transaction data which follows whom and then you make a copy of the system as a Production system a day before and after checking the successful data loads, you go-live 100% or partial again depending upon organizational setup and policies.
Cutover planning is highly site specific. There's no thumb rule. The stock data as on the date of going live should be correctly entered. But stock being a highly dynamic quantity, the strategy for loading should be crystal clear. Then you have to load all the back dated transaction on the stock. Some stock comes into your plant/storage location as return and some stock is actually delivered to your customer through sales orders of various kinds.
Please refer this link,
[PP Cut over activity|http://www.sap-img.com/production/pp-questions-answers.htm]
Regards,
R.Brahmankar

Difference between S_PROGRAM and S_DEVELOP!!

Hi All,
Can anyone please tell me the difference between S_PROGRAM and S_DEVELOP..??
I think both are used to protect the access to the ABAP programs..Then how it's different from each other?
Thanks in advance,
Ram

Hello Ramkumar,
S_PROGRAM authorization object is used as mentioned, to protect execution of the program:
For example ig you have a program called "ZPROGRAM" and you want to secure the program such that only a select few people can execute it, you need to assign an "authorization group" (dont confuse this with the authorization group value used in S_TABU_DIS).
To assign the authorization group to the prgram go to transaction SE38 type in the progrm name and click on edit
(Please note that you need a DEVELOPER key to edit the program)
Then once you the program is displayed use the menu option:
GOTO--> attributes
One of the field displayed here is "authorization group". You have to assign the authotization group here (the field name is SECU) (these authorization group values are stored in table TPGP).
But as suggested by Julius RSCSAUTH is a better option especially since Security guys wont have access to developer keys.
Once this is done, the authorization group has to be assigned in the object S_PROGRAM in an authorization role.
Only if the role containing this object (with the appropriate value) is assigned to the user, he will be able to execute that program.
S_DEVELOP is used to create / modify / change programs (and their attributes). This authorization is only necessary for ABAP developers / prgrammers and you should avoid assigning this to anyone else.
Hope this helps.
Regards,
Prashant

Difference between rsnast00 and rseout00

hi,
Can any one say me the difference between RSNAST00 and RSEOUT00.

The ABAP RSNAST00 is the standard ABAP, which is used to collect unprocessed NAST message and to execute the assigned action.
RSNAST00 can be executed as a collector batch run, that eventually looks for unprocessed IDocs. The usual way of doing that is to define a batch-run job with
transaction SM37. This job has to be set for periodic processing and start a program that triggers the IDoc re-sending.
ABAP program RSNAST00 (which is scheduled to run on a periodic basis) reads the NAST records and creates outbound IDocs for each one, based on the ALE configuration. It writes these IDocs to the IDoc tables (EDIDC, EDID4, EDIDS). If the partner profile is set to "Send immediately", then the ALE layer will send the IDocs at this time.
If the partner profile is set to "Collect IDocs", then the ALE layer will not send the IDocs until the ABAP program RSEOUT00 (also scheduled for periodic execution) runs. This program calls the ALE layer to send all collected IDocs of any specified message types.

Looking for new laptop what are the differences between pro and air? Besides size. Does the air preform like the pro?

Looking for new laptop what are the differences between pro and air? Besides size. Does the air preform like the pro?

The NEW macbook Pro and Air are EXTREMELY close in form factor
The newest macbook Pro is essentially a larger macbook Air with Retina display and options for speed in increasing prices up to an independent graphics and quad core processor.
both Air and new Pro now have PCIe SSD and permanent RAM.
The Air is the lightweight portable form factor, fast to boot and shut down, but with longer battery life than any of the macbook pro in 13"
Now the new macbook Pro and macbook Air are extremely close in form factor and nature.
both have 802ac wifi
both have permanent RAM, no superdrive
both are slim profiles and SSD
The only real differences now are (in the most expensive Pros) faster processors and quadcore processors and top end model autonomous graphics.
....and of course the retina display
both are now "very good for travel"
Other than features the form factor of the Air and Pro are VERY close now,....so now its merely a matter of features and price more than anything.
You need an external HD regardless of what you get for backups etc. Drop into an Apple store and handle both and make your choice based on features, such as Retina or non-retina, .... both at a distance now look like the same computer.
The Pro weighs more, ....but nowhere near what it used to just a month ago on the older macbook Pros
The NEW macbook Pro is a different creature entirely than the older macbook Pro, .....the new Pro is thicker than the Air, but id frankly call the NEWEST Pro a "macbook Air with Retina display" , or
Maybe a “macbook Air PRO with Retina display”
Instead of Air VS Pro now,.....its really a smooth transition from Air to pro without comparing say, 2 different creatures, now its like contrasting a horse from a race horse.
Either one in 8gig of RAM (preferably)... the 4gig upgrade costs very little, the I7 you will notice only 15% faster on heavy applications over the I5, and NOTHING on most APPS.....I5 has longer battery life.
As you see below, the non-Retina 13" AIR is 82% of the Macbook with Retina display in resolution
there is no magical number of pixels per inch that automatically equates to Retina quality.
http://www.cultofmac.com/168509/why-you-might-be-disappointed-by-the-resolution- of-those-new-retina-display-macs-feature/
A huge internal SSD isnt a game changer for anything, you need an external HD anyway
what you WONT READ on Apple.com etc. is that the larger SSD are MUCH FASTER due to SSD density
"The 512GB Samsung SSD found in our 13-inch model offers roughly a 400MB/s increase in write speeds over the 128GB SanDisk/Marvell SSD"
http://blog.macsales.com/19008-performance-testing-not-all-2013-macbook-air-ssds -are-the-same
Here is an excellent video comparison between the 11” I5 vs. I7 2013 Macbook Air.
http://www.youtube.com/watch?v=oDqJ-on03z4
http://www.anandtech.com/show/7113/2013-macbook-air-core-i5-4250u-vs-core-i7-465 0u/2
I5 vs. I7 performance 13” Macbook Air 2013
Boot performance
11.7 I5 ……11.4 I7
Cinebench
1.1 I5….1.41 I7
IMovie Import and Opt.
6.69 I5….5.35 I7
IMovie Export
10.33 I5…8.20 I7
Final Cut Pro X
21.47 I5…17.71 I7
Adobe Lightroom 3 Export
25.8 I5….31.8 I7
Adobe Photoshop CS5 Performance
27.3 I5…22.6 I7
Reviews of the newest Retina 2013 Macbook Pro
13”
Digital Trends (13") - http://www.digitaltrends.com/laptop-...h-2013-review/
LaptopMag (13") - http://www.laptopmag.com/reviews/lap...play-2013.aspx
Engadget (13") - http://www.engadget.com/2013/10/29/m...-13-inch-2013/
The Verge (13") - http://www.theverge.com/2013/10/30/5...ay-review-2013
CNet (13") - http://www.cnet.com/laptops/apple-ma...-35831098.html
15”
The Verge (15") - http://www.theverge.com/2013/10/24/5...w-15-inch-2013
LaptopMag (15") - http://www.laptopmag.com/reviews/lap...inch-2013.aspx
TechCrunch (15") - http://techcrunch.com/2013/10/25/lat...ok-pro-review/
CNet (15") - http://www.cnet.com/apple-macbook-pro-with-retina-2013/
PC Mag (15") - http://www.pcmag.com/article2/0,2817,2426359,00.asp
Arstechnica (15") - http://arstechnica.com/apple/2013/10...-pro-reviewed/
Slashgear (15") - http://www.slashgear.com/macbook-pro...2013-26303163/

Difference between profile and role

Similar Messages

Maybe you are looking for