Difference between User Group in "Logon data" and "Groups"
tab in SU01
Answer Posted / sanketshingote
User Group under Logon data - It is used for Authorization check. Auth. Object S_USER_GRP(ACTVT, CLASS) will be checked. This is helpful to restrict admins to particular group. They cannot access the information from other group.
Groups Tab - This is a general purpose group. This is not used for Authorization check at all. Anything maintained or not maintained here doesn't make any difference. This was helpful when SUIM T-code was used for searching users with Users with complex selection criteria to get details of user assigned to particular group. This not not used much.
Example for User Group under Logon Data Tab:
Assume you have a Basis team and want to just access the users for this team, you will just create a group(ex.: Basis) for all these users and restrict the admin to just have access to the group(ex. Basis) with these users. The admin will then have access to only users under this group and cannot access other users at all.
| Is This Answer Correct ? | 2 Yes | 0 No |
Post New Answer View All Answers
Hi, Can any one tell me, what is roles and responsibilities for SAP-Security resource in 'Netweaver Identity Management'
How to add custon t-code to a role and how to find the auth obj of custom t-code.if the custom t-code doesnt have auth obj, will you save and generate the role?
What is the Functionality difference between ECC 5 and ECC6? i.e. new functionality in ECC6 which is not in ECC 5.
Giving fire call access and extending fire call access by using VIRSA’s VFAT tool.can any one brief this
Userdone tasks with ffid n system send log reports to controller in his work inbox but whenever its open its showing blank screen, why?
Which transaction should not be given to BASIS and DEV team in Production?
How we Educated client personnel in R/3 Security and general Basis knowledge
what is the different b/w su10 and su12
Attributes in SE01?
What is the difference between authorization object and authorization object class?
what is the main difference between the derived role and a single role?
In pfcg where we can add customized t-codes. And where we can see customized t-codes
What does the account assessment category specify in a purchasing document in SAP Materials Management?
What is the difference between the table buffer and the user buffer?
what is the difference between usobt_c and usobx_c?