What is Authorization?
Authorization in SAP means giving users access right to certain transactional codes. Using T-Code PFCG allows Basis to change user’s authorization inside a T-Code. By adjusting the object you also can control user’s activity such as display, edit, or change certain field in the T-Code.
A Role Is created with the profile generator and allows the automatic generation of an authorization profile. The role contains the authorization data and the logon menu for the user.
When we have a few roles, we can group them up as Composite role.