why do we need Profiles ?

699 Views

Hi all,

I know it a bit stupid question you would think but do read it complete before answering.

1. When we create a role the role name is given and tcodes are assigned to it.

Then we go to the authorization tab, before that it asks us to save the role.

So the function of the role is only that much ? .

2. Then we go to the authorization tab and then go to generate profiles. It pulls the authorizations and authorization profiles for all the objects in a role.

Now my question is :-->

Why SAP needed to maintain roles and profiles separately, whereas it could simply have a single activation button as we have in ABAP in authorization tab which would pull the authorization into the objects ? That would not generate any profile and we need not maintain tables related to Profiles.

NOW PLEASE DONT ANSWER THAT WITHOUT PROFILE ROLE IS OF NO USE.....TILL WE DONOT GENERATE THE PROFILE WE CANNOT USE THE ROLE.

hope all have understood my question if there is any doubt let me know.