Skip to Content
author's profile photo Former Member
Former Member



in supc t. code used for mass generation of profile.

but what exact done give me any example in detail?

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Dec 18, 2008 at 10:54 AM


    To generate more than one profile, mass profile generation transaction to determine which roles already have authorization profiles. You can also perform a mass generation of roles or generate the missing role authorization profiles for roles in the background.



    1. Create a role for each administrator.

    a. Enter a name in the Role field in role administration (transaction PFCG) and choose Create Role.

    b. Do not assign any transactions; instead, choose Change authorization data on the Authorizations tab page.

    A dialog box appears asking you to choose a template.

    c. Choose one of the following templates:




    Authorization profile administrator


    Authorization data administrator


    User administrator

    d. Generate an authorization profile in each case.

    Use a profile name that does not begin with u201CTu201D, so that the authorization data administrator cannot change his or her own authorizations.

    2. On the User tab page, assign the role to the relevant user, that is, to the administrator.

    3. Save your entries.

    4. So that the user administrators cannot change their own user master records, or those of other administrators, assign them to the group SUPER. This applies if you are using the predefined user administration authorizations.


    a. To do this, choose the Logon Data tab page in user administration (transaction SU01).

    b. In the User Group for Authorization Check field, enter the value SUPER.

    c. Save your entries.

    5. If appropriate, restrict the authorizations of the administrators further:

    ○ You can use authorization objects S_USER_AGR, S_USER_TCD and S_USER_VAL to further differentiate the roles of the administrators.

    ○ For the user administrator, you can restrict the authorization to particular user groups.

    ○ For the profile administrator, you can exclude additional authorization objects, for example, for HR data. If you want your generated authorization profiles to begin with a letter other than u201CTu201D, you should inform your profile administrator.


    Sreedhar Reddy.A

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Dec 18, 2008 at 06:44 AM


    Please check the link below

    Hope it helps you.



    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.