Based on Roles and Authorizations.
Uses Authorization Objects – These are combinations of fields that define access.
For example, S_TCODE controls access to transaction codes. Roles and Profiles
Roles (created via PFCG) group together transactions, reports, and authorizations.
Each role generates one or more Profiles, which are assigned to users.
