”It was from the very beginning relatively good understandable that the authorizations are built in blocks. The function-tasks concept” Every task a user performs corresponds with a single role in a SAP system. The function of a person (the combinations of tasks), corresponds with a composite role in a SAP system. “Because of this concept, the organization had a good understanding of the authorizations. They see their own descriptions in job roles and they know what their authorizations are”.