Difference between User Group in "Logon data" and "Groups"
tab in SU01

Answer Posted / sanketshingote

User Group under Logon data - It is used for Authorization check. Auth. Object S_USER_GRP(ACTVT, CLASS) will be checked. This is helpful to restrict admins to particular group. They cannot access the information from other group.

Groups Tab - This is a general purpose group. This is not used for Authorization check at all. Anything maintained or not maintained here doesn't make any difference. This was helpful when SUIM T-code was used for searching users with Users with complex selection criteria to get details of user assigned to particular group. This not not used much.

Example for User Group under Logon Data Tab:
Assume you have a Basis team and want to just access the users for this team, you will just create a group(ex.: Basis) for all these users and restrict the admin to just have access to the group(ex. Basis) with these users. The admin will then have access to only users under this group and cannot access other users at all.

Is This Answer Correct ?    2 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

What does the account assessment category specify in a purchasing document in SAP Materials Management?

1092


Giving fire call access and extending fire call access by using VIRSA’s VFAT tool? can u brief give the explanation

3942


what is the use of defaults tab in start menu

1539


What are su53 t-codes used for?

978


Can wildcards be used in authorizations?

872






You wan to transport user groups from transaction sugr? Would this impact the groups tab in su01? What would you do?

893


In pfcg where we can add customized t-codes. And where we can see customized t-codes

1388


When would you update a sap table directly? What precautions would you taje?

912


can you please send me SAP Security upgrade documents and guide for CRM 5 and CRM 7 and what are the differeces between crm 5 AND crm 7 according to sap security point of view.

2433


A person has different user ids in different systems and you want to manage their authorizations centrally. Is it possible? How would you do it?

896


what is user base in sap security?

1343


Explain sap system transactions?

831


Explain snc in sap security?

861


What does the item category specify in a purchasing order in SAP Materials Management?

1084


what is the main difference between the derived role and a single role?

841