Creating and Editing User Master Records

With these functions, you can assign user data and access authorizations to the users of SAP NetWeaver Application Server (AS) ABAP.

You have the following authorizations as the user administrator:

• Authorization to create or edit a user master record and to assign it to a user group (object S_USER_GRP)
• Authorization for the authorization profiles you assign to users (object S_USER_PRO)
• Authorization to create and edit authorizations (object S_USER_AUTH)
• Authorization to protect roles. You can use this authorization object to determine which roles may be processed and which activities (Create, Display, Change, and so on) are available for the role(s) (object S_USER_AGR).
• Authorization for transactions that you may assign to the role and for which you can assign authorization at the start of the transaction in the Profile Generator (object S_USER_TCD)
• Authorization to restrict the values which a system administrator can insert or change in a role in the Profile generator (S_USER_VAL)

For more information about assigning authorizations to administrators, see Organizing Authorization Administration.

1. Choose Tools → Administration → User Maintenance → User (transaction SU01).

   The User maintenance: Initial screen appears.

2. Enter a new user name and choose Create () or enter an existing user name or alias (such as an Internet user) and choose Change ().

   You can restrict the characters allowed in user names. For more information, see Rules for User Names.

   You can also create a user by copying existing users.

3. Enter the personal data for the user on the Address tab page. The Last name field must be filled. This data belongs to the Business Address Services (BC-SRV-ADR).

   There are the following tab pages in user administration: Address, Logon Data, (possibly SNC), Defaults,Parameters, (possibly Systems), Roles, Profiles,Groups, Personalization, and License Data. The tab pages SNC and Systems are only displayed if the SNC interface and Central User Administration are used.

   The tab pages can be divided into those you must maintain and those you can optionally maintain:

   • You do not need to edit the Defaults and Parameters tab pages. Users can change this data themselves later by choosing System → User profile → Own data (see Editing User Defaults and Options). You can use transaction variants to restrict the fields that users can edit themselves.
   • The Address, Logon data, Roles, andProfiles tab pages contain fields that you must fill in. More information about the tab pages for user administration:
     • Logon Data Tab Page
     • DBMS Tab
     • SNC Tab Page
     • Roles Tab Page
     • Profiles Tab Page
     • Groups Tab Page
     • Personalization Tab Page
     • License Data Tab Page
4. Save your entries.

   The application toolbar contains the following pushbuttons:

   License data

   The License Data tab page appears, so that you can enter measurement-relevant data. For more information, see the System Measurement Guide on the SAP Service Marketplace (http://service.sap.com/licenseauditing)  → System Measurement Named User  → Documentation.

   References

   This function allows the application developers to assign a business object to a user, to, for example, display this user's own data. In transaction SU01, it is used only for display. A table appears in which you can assign business object types to a user. An object type is a description of data (objects) used in the system, created at definition time in the Business Object Builder. An object is any type of connected information that is addressed with a unique key; such as master data (customer, material, vendor, and so on). The possible entries help for the Object type field lists all available object types. This function is not the same as assigning reference users on the Roles tab page.

 

More information:

User Administration Functions