Transaction code PFCG is a role maintenance administration to manage roles and authorization data. The tool for role maintenance, the Profile Generator automatically creates authorization data based on selected menu functions. These are then presented for fine-tuning. SAP recommend that to use the role maintenance functions and the profile generator (transaction code PFCG) to maintain the roles, authorizations, and profiles. Although we can continue to create profiles manually, we still need detailed knowledge of all SAP authorization components. The role maintenance functions support in performing the task by automating various processes and allowing to be more flexibility in the authorization plan. We can also use the central user administration functions to centrally maintain the roles delivered by SAP or our own, new roles, and to assign the roles to any number of users. The roles, which are based on the organizational plan of your company, form the structure for the Profile Generator. These roles are the connection between the user and the corresponding authorizations. The actual authorizations and profiles are stored in the SAP system as objects. With the roles, we can assign to any users which will be the user menu that is displayed after they log on to the SAP System. Roles also contain the authorizations with which users can access the transactions, reports, Web-based applications, and so on that are contained in the menu.
In the role maintenance, we can also change and assign roles, creating roles, creating composite roles and transport and distributing roles.