it enables to perform a particular activity in the SAP system, based on a set of authorization object field values. It allows specifying any number of single values or value ranges for a field of an authorization object. It also extends and changes the SAP defaults with role maintenance.