An authorization profile in an AS ABAP-based SAP system is a collection of authorizations that are assigned to a user. An authorization is a permission to perform a certain action or access a certain object in the system. An authorization object is a logical grouping of one or more authorization fields that define the scope of an authorization. For example, an authorization object for document posting may include authorization fields for company code, document type, and posting period. A single role is a container for one or more authorization profiles that define the tasks and responsibilities of a user or a group of users. A composite role is a container for one or more single roles that can be used to simplify the role administration. Reference: [SAPTEC], Unit 4: User Administration, Lesson: Authorizations, Slide 6-10; [ADM100], Unit 4: User Administration, Lesson: Authorizations, Slide 6-10.