Answer / gaurav shrivastava

Further more adding to the response and replying to above
post : The user group in Logon tab is user's primary user
group. When you go to maintain or create user then the
check is made whether u have access to that user group in
S_USER_GRP or not. For you also when someone change or
maintains youe umr then for that user your user grp is
checked. Logon tab contains that user group. Also this
enables you to assign the user group you have here to other
users.


The users who do not have any user grp assigned to them can
be maintained by all administrators.

In groups tab we can maintain more tha one user group for a
user. Those are called secondary user groups.

Answer / mar

The diff between Logon data group you can map one user with
only one group.But in groups you can map one user with
multiple group.

Answer / shad

further to above replies,
As per my understanding Authorization user group is added in
Logon data tab whereas general user group is added in Groups
tab. User can have only one authorization user group whereas
user can have multiple general user group.

With authorization user group you can segregate user
maintenance. for ex: In a large organization, you may
distribute users into different groups and each group can
further be managed by an Administrator

Answer / sanketshingote

User Group under Logon data - It is used for Authorization check. Auth. Object S_USER_GRP(ACTVT, CLASS) will be checked. This is helpful to restrict admins to particular group. They cannot access the information from other group.

Groups Tab - This is a general purpose group. This is not used for Authorization check at all. Anything maintained or not maintained here doesn't make any difference. This was helpful when SUIM T-code was used for searching users with Users with complex selection criteria to get details of user assigned to particular group. This not not used much.

Example for User Group under Logon Data Tab:
Assume you have a Basis team and want to just access the users for this team, you will just create a group(ex.: Basis) for all these users and restrict the admin to just have access to the group(ex. Basis) with these users. The admin will then have access to only users under this group and cannot access other users at all.

Answer / guest

Further more adding to the response and replying to above
post : The user group in Logon tab is user's primary user
group. When you go to maintain or create user then the
check is made whether u have access to that user group in
S_USER_GRP or not. For you also when someone change or
maintains youe umr then for that user your user grp is
checked. Logon tab contains that user group. Also this
enables you to assign the user group you have here to other
users.


The users who do not have any user grp assigned to them can
be maintained by all administrators.

In groups tab we can maintain more tha one user group for a
user. Those are called secondary user groups.

Answer / annavarapu

the group that are showing in logon data is identification of user which group he is belongs to and the group tab is to add that user in multiple groups...like ex:-
If i am a basis employee we will group him at logon tab...
and we want to add this guy into more groups we will add those at group tab ......

Answer / guest

pls answer 4 time asking this question pls send to clear
answer with exampls

Answer / guest

Instead of giving a user group in logon data tab we can
specify it in gruops tab, then also the identification of
user group is same...what is the difference in this case?
can any one please answer this. Thanks in advance

use of T-code SE63

2 Answers   IBM, Satyam,

Can you explain document transfer-level security?

0 Answers  

what is centralized n decentralized

3 Answers   IBM,

What appears as the last sentence in sap note 587410? What does it men and how would you restrict it?

0 Answers  

SAP SECURITY Training in Hyderbad,contact 7893255000. R3 SEC,BW/BI Sec,HR SEC,SRM SEC,EP SEC,VIRSA and GRC Tools.

3 Answers  

We have one request to modify role(adding field value in auth. object) and we have added it. when transporting that role, getting error "role XXXXX type is undetermined" can any body please suggest, how to fix this issue?

2 Answers   Cap Gemini, IBM,

what reports or programs can be used to regenerate sap_all profile?

1 Answers  

Hi Experts, can any one let me know the Tables which we use for compliance calibrator & Access enforcer of grc and please let me know the background jobs of grc, Please it's urgent so please answer as soon as possible to these questions , I really appreciate your help, Thanks karunakar

0 Answers   IBM,

what is sox and in sap security?

2 Answers   IBM,

How to do Role Design, Testing and Implementation

0 Answers   IBM,

1.why we use derived role in sap security?2.what is the technical difference between master and derived role?

1 Answers   KPMG,

what is use of su56?

3 Answers   Accenture, IBM,