With these functions, you can assign user data and access authorizations to the users of your ABAP system.
The changes that you make to user master records only take effect when the user next logs on to the system. If a user is logged on at the time when the system administrator implements the changes, these will only take effect when the user logs on to their next session.
You can also change a user’s authorizations by changing and then reactivating profiles and authorizations within the user master record. Changes to reactivated authorizations have immediate effect. Changes to profiles, on the other hand, only take effect at the user’s next logon.
You have the following authorizations as the user administrator:
● Authorization to create or edit a user master record and to assign it to a user group (object S_USER_GRP)
● Authorization for the authorization profiles you assign to users (object S_USER_PRO)
● Authorization to create and edit authorizations (object S_USER_AUTH)
● Authorization to protect roles. You can use this authorization object to determine which roles may be processed and which activities (Create, Display, Change, and so on) are available for the role(s) (object S_USER_AGR).
● Authorization for transactions that you may assign to the role and for which you can assign authorization at the start of the transaction in the Profile Generator (object S_USER_TCD)
● Authorization to restrict the values which a system administrator can insert or change in a role in the Profile generator (S_USER_VAL)
For more information about assigning authorizations to administrators, see Organizing Authorization Administration.
1. Choose Tools ® Administration ® User Maintenance ® User (transaction SU01).
The User maintenance: Initial screen appears.
2. Enter a new user name and choose Create ()or enter an existing user name or alias (such as an Internet user) and choose Change ().
You can also create a user by copying existing users.
3. Enter the personal data for the user on the Address tab page. The Last name field must be filled. This data belongs to the Business Address Services (BC-SRV-ADR).
There are the following tab pages in user administration: Address, Logon Data, (possibly SNC), Defaults, Parameters, (possibly Systems), Roles, Profiles, Groups, Personalization, and License Data. The tab pages SNC and Systems are only displayed if the SNC interface and Central User Administration are used.
The tab pages can be divided into those you must maintain and those you can optionally maintain:
○ You do not need to edit the Defaults and Parameters tab pages. Users can change this data themselves later by choosing System ®User profile ®Own data (see Editing User Defaults and Options). You can use transaction variants to restrict the fields that users can edit themselves.
○ The Address, Logon data, Roles, andProfiles tab pages contain fields that you must fill in. More information about the tab pages for user administration:
4. Save your entries.
The application toolbar contains the following pushbuttons:
The License Data tab page appears, so that you can enter measurement-relevant data. For more information, see the System Measurement Guide on the SAP Service Marketplace (http://service.sap.com/licenseauditing) ® System Measurement Named User ® Documentation.
This function allows the application developers to assign a business object to a user, to, for example, display this user’s own data. In transaction SU01, it is used only for display.
A table appears in which you can assign business object types to a user. An object type is a description of data (objects) used in the system, created at definition time in the Business Object Builder. An object is any type of connected information that is addressed with a unique key; such as master data (customer, material, vendor, and so on).
The possible entries help for the Object type field lists all available object types.
This function is not the same as assigning reference users on the Roles tab page.