Creating and Editing User Master Records
Use
With these functions, you can assign user data and access authorizations to the users of your ABAP system.
The changes that you make to user master records only take effect when the user next logs on to the system. If a user is logged on at the time when the system administrator implements the changes, these will only take effect when the user logs on to their next session.
You can also change a user’s authorizations by changing and then reactivating profiles and authorizations within the user master record. Changes to reactivated authorizations have immediate effect. Changes to profiles, on the other hand, only take effect at the user’s next logon.
Prerequisites
You have the following authorizations as the user administrator:
● Authorization to create or edit a user master record and to assign it to a user group (object S_USER_GRP)
● Authorization for the authorization profiles you assign to users (object S_USER_PRO)
● Authorization to create and edit authorizations (object S_USER_AUTH)
● Authorization to protect roles. You can use this authorization object to determine which roles may be processed and which activities (Create, Display, Change, and so on) are available for the role(s) (object S_USER_AGR).
● Authorization for transactions that you may assign to the role and for which you can assign authorization at the start of the transaction in the Profile Generator (object S_USER_TCD)
● Authorization to restrict the values which a system administrator can insert or change in a role in the Profile generator (S_USER_VAL)
For more information about assigning authorizations to
administrators, see
Organizing
Authorization Administration.
Procedure
...
1. Choose Tools →Administration → User Maintenance → User (transaction SU01).
The User maintenance: Initial screen appears.
2.
Enter a new user name and choose Create (
)or enter an existing user name or
alias (such as an Internet user) and choose Change (
).
You can restrict the characters allowed in user
names. For more information, see
Rules for User
Names.
You can also create a user by
copying existing
users.
3.
Enter the personal data for the user on the
Address tab page. The Last name field must be filled. This data
belongs to the
Business Address
Services (BC-SRV-ADR).
There are the following tab pages in user
administration: Address, Logon Data, (possibly SNC),
Defaults,Parameters, (possibly Systems), Roles,
Profiles,Groups, Personalization, and License
Data. The tab pages SNC and
Systems are only
displayed if the SNC interface and Central User Administration are used.
The tab pages can be divided into those you must maintain and those you can optionally maintain:
○
You do not need to edit the Defaults and
Parameters tab pages. Users can change this data themselves later by
choosing System → User profile
→Own
data (see
Editing User Defaults
and Options). You can use
transaction
variants to restrict the fields that users can edit themselves.
○ The Address, Logon data, Roles, andProfiles tab pages contain fields that you must fill in. More information about the tab pages for user administration:
4. Save your entries.
The application toolbar contains the following pushbuttons:
License data |
The License Data tab page appears, so that you can enter measurement-relevant data. For more information, see the System Measurement Guide on the SAP Service Marketplace (http://service.sap.com/licenseauditing) → System Measurement Named User → Documentation. |
References |
This function allows the application developers to assign a business object to a user, to, for example, display this user’s own data. In transaction SU01, it is used only for display. A table appears in which you can assign business object
types to a user. An object type is a description of data (objects) used in the
system, created at definition time in the
The possible entries help for the Object type field lists all available object types.
This function is not the same as assigning reference users on the Roles tab page. |
More information: