Difference between User Group in "Logon data" and "Groups"
tab in SU01
Answer Posted / sanketshingote
User Group under Logon data - It is used for Authorization check. Auth. Object S_USER_GRP(ACTVT, CLASS) will be checked. This is helpful to restrict admins to particular group. They cannot access the information from other group.
Groups Tab - This is a general purpose group. This is not used for Authorization check at all. Anything maintained or not maintained here doesn't make any difference. This was helpful when SUIM T-code was used for searching users with Users with complex selection criteria to get details of user assigned to particular group. This not not used much.
Example for User Group under Logon Data Tab:
Assume you have a Basis team and want to just access the users for this team, you will just create a group(ex.: Basis) for all these users and restrict the admin to just have access to the group(ex. Basis) with these users. The admin will then have access to only users under this group and cannot access other users at all.
| Is This Answer Correct ? | 2 Yes | 0 No |
Post New Answer View All Answers
Which tables will you use for making customizing setting for security administration?
What is t code?
What are se09 t-codes used for?
what is sod in sap security?
Can you explain document transfer-level security?
what is the difference between usobt_c and usobx_c?
How we Provided SAP Security design, configuration, and support for SAP Net Weaver systems running BI/BW 7.0 (Net Weaver 2004s)
What is the use of su56?
What is the difference between role and a profile?
How to codify for an Item in SAP? How many digits are required for an item?
What is the difference between authorization object and authorization object class?
When would you update a sap table directly?
what is user buffer?
what things you have to take care before executing run system trace?
Is it possible to have more than one st of org-level values in one role? Explain your answer.