Why is directly assigning profiles discouraged, and what's the exception and its safeguard?

Why are 100/JANE and 200/JANE entirely distinct users in SAP S/4HANA?

What's the relationship between roles and authorization profiles?

In an authorization matrix, what are the header, columns, and rows — and what does * mean?

Which transaction does SAP recommend for an authorization trace, and why over ST01?

What's the difference between a single role and a composite role, and what can't a composite contain?

What happens if a role has an associated menu (Menu tab)?