Creating and Maintaining User Master Records

The existence of a user master record is a prerequisite for logging on to the SAP System. The user master record determines which role is assigned to the user, i.e. which activities are in the user menu and which authorizations the user has.

Integration

User master records are client-specific. You therefore need to maintain individual user master records for each client in your SAP System. If you use the Central User Administration, you should create and maintain the users in the central system.

Prerequisites

You need authorizations to create or maintain user master records:

• Authorization to create and/or maintain user master records and to assign a user group (object S_USER_GRP).
• Authorization for the authorization profiles you want to assign to users (object S_USER_PRO).
• Authorization to create and maintain authorizations (object S_USER_AUTH).
• Authorization to protect roles. You can use this authorization object to determine which roles may be processed and which activities (Create, Display, Change and so on) are available for the role(s) (object S_USER_AGR).
• Authorization for transactions that you may assign to the role and for which you can assign authorization at the start of the transaction in the Profile Generator (object S_USER_TCD).
• Authorization to restrict the values which a system administrator can insert or change in a role in the Profile generator (S_USER_VAL)