Question: what is the difference between sap role and profile?
Answer: A role is basically a container of authorizations and other related items. A profile contains the actual authorizations once a role is generated. In addition a profile can be created from scratch using the classical method--transaction SU02. Roles are created via transaction PFCG.