How To /Learn - Creating Customer Specific SAP Role in PFCG Transaction in SAP(Systems Applications Products for Data Processing)

How to copy and create a SAP Customized Role using PFCG transaction code

We know the basics that if you have to use SAP which is a wonderful product by SAP SE company and now being utilized with quite companies all over the world. The authorization in this product are typically govern by SAP transaction PFCG roles concept.
We call it SAP Security Team or SAP Security/Gatekeepers who make sure no one can access something for which they are not authorized to do so.

Sometimes we say let goto BASIS people and ask them for missing authorization but in reality it is the concept of security and actually done by SAP Security Team in any organization or support team to be precise based upon my experience.

It is always recommended not to modify the original role delivered by SAP but to copy it to customer namespace i.e to create a role with "z" or "y" namespace.

Many times the customer requirement varies so much that to provide more security etc the Standard role needs to be modified.

For this just visit the transaction

TCODE- PFCG

1. Now enter the name of SAP standard role and click button to copy the role or choose from sap menu.  
2. Now provide the target name starting with “Z” or “Y” and now press enter key
3. The role is copied to your zname and enter the new role name and click change button.
4. In the upcoming screen click on the Tab Authorization and goto maintain authorization data
5. Now update the object as per requirement followed by Save and generate

Finally assign this role to the respective users solving the purpose and also this is valid for 
SAP R/3
SAP ERP Ehp1, EHP2 etc
SAP Solution Manager
SAP CRM
SAP BI 
SAP GRC etc