Creating and Maintaining User Master Records

Use

With these functions, you can assign user data and access authorizations to the users of your SAP System.

The changes that you make to user master records only take effect when the user next logs on to the system. If a user is logged on at the time when the system administrator implements the changes, these will only take effect when the user logs on to their next session.

You can also change a user’s authorizations by changing and then reactivating profiles and authorizations within the user master record. Changes to reactivated authorizations have immediate effect. Changes to profiles, on the other hand, only take effect at the user’s next logon.

Prerequisites

You have the following authorizations as the user administrator:

· Authorization to create or maintain a user master record and to assign it to a user group (object S_USER_GRP)

· Authorization for the authorization profiles you assign to users (object S_USER_PRO)

· Authorization to create and maintain authorizations (object S_USER_AUTH)

· Authorization to protect roles. You can use this authorization object to determine which roles may be processed and which activities (Create, Display, Change,and so on) are available for the role(s) (object S_USER_AGR).

· Authorization for transactions that you may assign to the role and for which you can assign authorization at the start of the transaction in the Profile Generator (object S_USER_TCD)

· Authorization to restrict the values which a system administrator can insert or change in a role in the Profile generator (S_USER_VAL)

For more information about assigning authorizations to administrators, see Organizing Authorization Administration.

Procedure

...

1. Choose Tools ® Administration ® User Maintenance ® User (transaction SU01).

The User maintenance: Initial screen appears.

2. Enter a new user name and choose Create ()or enter an existing user name or alias (such as an Internet user) and choose Change ().

You can also create a user by copying existing users.

3. Enter the personal data for the user on the Address tab page. The Last name field must be filled. This data belongs to the Business Address Services (BC-SRV-ADR)s.

There are the following tab pages in user maintenance: Address, Logon Data,(possibly SNC), Defaults, Parameters, (possibly Systems), Roles, Profiles, Groups,Personalization, and Licence Data. The tab pages SNC and Systems are only displayed if the SNC interface and Central User Administration are used.

The tab pages can be divided into those you must maintain and those you can optionally maintain:

¡ You do not need to maintain the Defaults and Parameters tab pages. Users can change this data themselves later by choosing System® User profile ® Own data(see Maintaining User Defaults and Options). You can restrict the fields that can be maintained by end users with Transaction Variants.

¡ The Address, Logon data, Roles, and Profiles tab pages contain fields that you must fill in. For more information about the tab pages for user maintenance, see:

§ Logon Data Tab Page

§ SNC Tab Page

§ Roles Tab Page

§ Profile Tab Page

§ Groups Tab Page

§ Personalization Tab Page

§ License Data Tab Page

4. Save your entries.

The application toolbar contains the following pushbuttons:

Licence data

The Licence Data tab page appears, so that you can enter measurement-relevant data. For more information, see the System Measurement Guide on the SAP Service Marketplace (http://service.sap.com/licenseauditing) ® System Measurement Named User ® Documentation.

References

This function allows the application developers to assign a business object to a user, to, for example, display this user’s own data. In transaction SU01, it is used only for display. A table appears in which you can assign business object types to a user. An object type is a description of data (objects) used in the system, created when the objects are defined in the Business Object Builder. An object is any type of connected information that is addressed with a unique key; such as master data (customer, material, vendor, and so on). The possible entries help for the Object type field lists all available object types. This function is not the same as assigning reference users on the Roles