User Management 
Use
MIC user management uses the mechanisms provided by SAP NetWeaver, such as tools, user types, and the password concept. For an overview of how these mechanisms affect MIC, see the sections below. Furthermore, the system outputs a list of users that are required for operations.
User Management Tool
MIC uses
user and role maintenance from SAP Web
AS ABAP (transactions SU01, PFCG) For more information, see 
Users and Roles
(BC-SEC-USR). To find out which roles are delivered for MIC, see under Standard Roles
and Authorization Objects.
User Types
It is often necessary to create different security policies for different types of users. For example, your policy may specify that users who perform their tasks interactively have to change their passwords on a regular basis, but not those users who perform their tasks using background processing.
Examples of user types required for MIC:
· Individual users (dialog users)
¡ Required for logging on to the SAP GUI for Windows for configuring MIC and for MIC administration
¡ Required for logging on to the People-Centric User Interface for the operational use of MIC
¡ Required for the RFC connection to the BI system
· Technical users
¡ A system user is required for the workflow within MIC, for example (user WF-BATCH must have authorization for authorization profile SAP_ALL)
¡ A communications user can be required in order to set up the integration with the Audit Information System (AIS) for the RFC connection to the AIS system. Alternatively, you can define the RFC connection as a trusted system connection.
¡ A service user is required for the connection of external applications using the Exchange Infrastructure (XI). The user must have the corresponding XI authorization as well as the authorization for the standard role Management of Internal Controls – Business User (SAP_CGV_MIC_BUSINESS_USER). For more information, see the SAP Exchange Infrastructure Security Guide under Service Users for Message Exchange.