А для чего предназначен профиль SAP_NEW ?

Symptom

SAP updates the profile SAP_NEW with every functional upgrade. The profile can be assigned to the users in the upgrade postprocessing phase, but the meaning of the profile is not particularly clear to all administrators.
Additional key words

..
Cause and prerequisites

The meaning of this profile is not self-explanatory.
Solution
Motivation for delivery profile SAP_NEW
---------------------------------------

There are some functionalities that are not protected by an authorization check, although they are worth protecting. SAP is slowly working on closing these "gaps", that is, further authorization checks are being installed. The authorization profile SAP_NEW contains authorizations for all check objects that were implemented in previously existing functions. To ensure upward compatibility for every upgrade, the delivery profile SAP_NEW was implemented. All users should have the profile SAP_NEW in their master record. This ensures that a user may execute the same functions after the upgrade as he could before it.
Administrator's task after the upgrade
--------------------------------------

Directly after the upgrade, the user administrator should go through the profile SAP_NEW and leave only the subprofiles in this composite profile, which were generated for releases greater than the source release. The individual profiles SAP_NEW_<Rel> should be retained in order to later be able to verify which autorization was introduced in which release.
Caution
-------

The profile SAP_NEW does not contain the authorizations for functions that are new in that upgrade.

Especially the subprofile SAP_NEW_30E should never be assigned to the users in higher releases because it contains a start authorization for all transactions.

As of Release 4.6 SAP_NEW is not so important any longer if the profile generator is used and the SU25 is used for upgrade postprocessing of the user roles.