Answer / ravikanth dadi

User Group for Authorization (SU01 - Log-on tab) is used to segregate users per administrator. Let say 2 group are there for 2 country. And 2 administrator are assigned to maintain these 2 group. So they should not be able to maintain other country users.

Whereas General user group (SU01 - User group tab) is to segregate users as per their domain. It has no impact on authorization control. And it has less utility. So far I did not see a client to use this. Purpose of this group is served by earlier one only. So people are less bothered to maintain additional data here.

Answer / chaitu

su01 logon data user group for restrict the user access under s_user_grp authorisation object
groups tab user group group for asuim reporting purpose

how do you add sap_all and sap_new in a role?

6 Answers   Accenture,

---

Is it possible to assign two roles with different validity period to a user in one shot through GRC? If yes, how

2 Answers  

---

What are su01 t-codes used for?

1 Answers  

---

What authorization is required to create and maintain user master records?

0 Answers  

---

What does the pfcg_time_dependency clean up?

0 Answers  

---

---

what is the use of s_tabu_nam,s_tabu_dis,s_tabu_cli

2 Answers   IBM,

---

how to do Reporting and Analysis authorizations

0 Answers   IBM,

---

in which table we can find all authorization groups

5 Answers   Cognizant,

---

What is the use of tmssup* rfc destinations?

0 Answers  

---

How many transactions codes can be assigned to a role?

2 Answers  

---

How can we find out the roles that got directly generated into Production & not imported from Quality System? Please note, you don't have any Quality user id.

3 Answers  

---

how many composite roles can be assigned to a user ?

4 Answers   ADP, Baidu,

---