SAP User A Ministration

8/3/2019 SAP User A Ministration

1/17

BCO6181 - ERP Applications

SU01SAP

Mart Leepin

Mart Leepin 3092991 1


2/17

Used for creation of a user master, enabling log on and a level of

teraction in SAP.

SU01 would be used in an administrative or support role. Tasks could

e:

et up of new users for production or test environments;

aintenance of user master information dependant upon internal

mployee movements within a business.

n our scenario we will be creating a new dialogue user, then allocating

role to enable the new user to fulfil their specific business activities.

n SAP activities are protected by authorization.

Access is dependent upon specific corresponding authorization, which

determined by the types of activities within your role. When a role is

eated a profile is also generated, it is the profile that contains the

quired authorizations.

Authorization is important as it ensures segregation of duties, therefore

n enhanced level of security.

n order to access SU01 a user with a broad profile is required:

SAP* orBCUSER.



3/17


n Navigation field, enter transaction code: su01.


4/17


Userfield, enter: user1;

elect: Create orF8.


5/17Mart Leepin 3092991

5

Mandatory fields need to be specified / entered forPerson:

n Title field, select a title from the drop down box;

n Last name field, enter a last name;

n First name field, enter a first name;

mat ion Addresselds in the Address Tab belong to Business Address Services (BAS), which offers functions fo

anaging addresses in applications. Non mandatory fields can also be maintained, to view

dditional information regarding these, select the field of interest and press (F1) (SAP Help-

etWeaver 2004 SPS23-2011).

reat ing and m ainta in ing userstp://help.sap.com/saphelp_nw04/helpdata/en/52/671191439b11d1896f0000e8322d00/content.http://help.sap.com/saphelp_nw04/helpdata/en/e1/120024e74011d2962b0000e82de14a/content.h

/ To proceed, select tab: Logon Data.
http://help.sap.com/saphelp_nw04/helpdata/en/52/671191439b11d1896f0000e8322d00/content.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/e1/120024e74011d2962b0000e82de14a/content.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/e1/120024e74011d2962b0000e82de14a/content.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/52/671191439b11d1896f0000e8322d00/content.htm


6/17


User TypeIn User Type field, select: Dialog from the drop down box.

n Initial password field, enter a password to enable the first logon.

In repeat password field, enter password again to confirm.

ote: Please take note of password created!


7/17Mart Leepin 3092991

7

n Valid From field: enter the present date;

n Valid through field: enter a future date;

ype Purpose

alog Individual, interactive system access.

ystem Background processing and communication within a system (e.g. such asRFC users for ALE / Workflow).

ommunication Dialog-free communication for external RFC calls.ervice Dialog user available to a larger, anonymous group of users.

eference General, non-person related users that allows the assignment of additionalidentical authorizations, such as for Internet users created with transactionSU01. No logon is possible.

fo rmat ion Logon data : Summ ary o f user types

mat ion L ogon data : O ther f ie ldsUser group If a user is allocated to a group this ensures a particular administrator maintains

he group only.

Accounting Number and Cost Centre This provides further identification of the user to a

business area cost centre (SAP Help-NetWeaver 2004 SPS23-2011).

http://help.sap.com/saphelp_nw04/helpdata/en/52/67119e439b11d1896f0000e8322d00/content.h

http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.ht

/ To proceed, select tab: Defaults.
http://help.sap.com/saphelp_nw04/helpdata/en/52/67119e439b11d1896f0000e8322d00/content.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/52/67119e439b11d1896f0000e8322d00/content.htm


8/17


Default settings for start menu, language, decimal, date, time formats

can be adjusted to suit user preference as well as output devices.

http://help.sap.com/saphelp_nw04/helpdata/en/52/6711df439b11d1896f0000e8322d00/content.h

/ To proceed, select tab: Parameters.
http://help.sap.com/saphelp_nw04/helpdata/en/52/6711df439b11d1896f0000e8322d00/content.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/52/6711df439b11d1896f0000e8322d00/content.htm


9/17


Certain fields in SAP have a Parameter ID (PID). If a field has a PID,

he field can be specified under the Parameter ID column and a default

value can be specified for this field under the Parameter Value column.

To determine if a field has a PID, select the field, press F1 and select

he technical information button, if there is a PID, this will be displayed

with field information. (SAP Help - NetWeaver 2004 SPS23 - 2011),

SAP for MIT Getting started 2001, User Profile Parameters Wiki

2007).

etershttp://help.sap.com/saphelp_nw04/helpdata/en/52/6711df439b11d1896f0000e8322d00/content.h

http://web.mit.edu/sapr3/docs/webdocs/getstarted/gsSETTINGS.html

http://wiki.sdn.sap.com/wiki/display/HOME/User+Profile+Parameters

/ To proceed, select tab: Roles.
http://help.sap.com/saphelp_nw04/helpdata/en/52/6711df439b11d1896f0000e8322d00/content.htmhttp://web.mit.edu/sapr3/docs/webdocs/getstarted/gsSETTINGS.htmlhttp://web.mit.edu/sapr3/docs/webdocs/getstarted/gsSETTINGS.htmlhttp://help.sap.com/saphelp_nw04/helpdata/en/52/6711df439b11d1896f0000e8322d00/content.htm


10/17


Roles: Authorization in SAPTransactions, programs, and services in SAP systems are protected

from unauthorized access.

To access business objects or execute SAP transactions, a user

requires corresponding authorizations, as business objects or

transactions are protected by authorization objects.

Authorizations are defined depending on the activity and

responsibilities of the employee. The authorizations are combined inan authorization profile that is associated with a role. The user

administrators then assign the corresponding roles using the user

master record, so that the user can use the appropriate transactions

for his or her tasks.

Roles: Roles & ProfilesRoles are collections of activities undertaken to fulfil an assignment

within a business scenario.

These activities could be transactions or reports. To ensure security,

activities required to perform a role should be carefully defined when

roles are created in SAP, ensuring appropriate segregation of duty i.e.

access to some activities and restriction to others.

When a role is created, the corresponding profile, which contains the

necessary authorizations, is also created. Once a role is assigned to a

user, the corresponding activities and authorizations are then granted.

(SAP Help-NetWeaver 2004 SPS23-2011).


11/17


/ Select RoleUnderRole column header, select: the search box on the right.

n Single role field, enter: *

Select:


12/17


Scroll down through the Single roles List.

Select / Tick : SAP_BC_DWB_ABAPDEVELOPER - ABAP Develope

Select:

4/ Set Validity PeriodIn Valid From field: enter the present date;

In Valid to field: enter a future date;

Select: Save.


13/17


5/ Confirm Creation Of New UserAfter saving we should be back to User Maintenance Initial screen as

above. User1 is now saved and complete with a role. This can be

checked by logging on with ID: User1 and the Password created

previously.

To proceed, select: SAP logon pad.

5/ RolesAfter saving we should be

6/ Logon As New UserIn Userfield: Enter: user created;

In Password field, Enter: password created;

Press Enter;

Enter: New password and Repeat Password;

Select:


14/17


Explore the user menu for your new user created!

Help L inks & E xample - Ro leshttp://help.sap.com/saphelp_nw04/helpdata/en/52/671285439b11d1896f0000e8322d00/framese

http://help.sap.com/saphe_nw04/helpdata/en/c5/726ee5d803da43857584bb4daa9ddd/frameset

http://www.b-eye-network.com/view/3768
http://help.sap.com/saphelp_nw04/helpdata/en/52/671285439b11d1896f0000e8322d00/frameset.htmhttp://help.sap.com/saphe_nw04/helpdata/en/c5/726ee5d803da43857584bb4daa9ddd/frameset.htmhttp://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://help.sap.com/saphe_nw04/helpdata/en/c5/726ee5d803da43857584bb4daa9ddd/frameset.htmhttp://help.sap.com/saphelp_nw04/helpdata/en/52/671285439b11d1896f0000e8322d00/frameset.htm


15/17


In Userfield: Enter User name to be copied from;

Select Copy.

In To field: Enter New User name to be copied to;

Select: corresponding info. check boxes you wish to copy to the new

user;

Select Copy;

Amend: Address, Logon Data as required and Save;

Your new copied user is created!
http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768


16/17


In Userfield: Enter User name whose password is to be changed;Select Change password.

In New Password field: Enter new password;

In Repeat Password field: Confirm password;

Select:
http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768


17/17


SAP for MIT Getting started, 2001, Instructional documentation,

Massachusetts Institute of Technology, viewed 20th

April 2011,http://web.mit.edu/sapr3/docs/webdocs/getstarted/gsSETTINGS.html;

SAP Help - NetWeaver 2004 SPS23, 2011, SAP Help Portal, viewed

20th April 2011, http://help.sap.com/;

SAP Developers Network Wiki 2007, User Profile Parameters, wiki

article, 01st March, viewed 28th April 2011,

http://wiki.sdn.sap.com/wiki/display/HOME/User+Profile+Parameters.

Houze, G. 2007. SAP R/3 Security: Would You Like Roles With That

Logon?, online article, viewed 01st May 2011,

http://www.b-eye-network.com/view/3768
http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://web.mit.edu/sapr3/docs/webdocs/getstarted/gsSETTINGS.htmlhttp://help.sap.com/http://wiki.sdn.sap.com/wiki/display/HOME/User+Profile+Parametershttp://www.b-eye-network.com/view/3768http://www.b-eye-network.com/view/3768http://wiki.sdn.sap.com/wiki/display/HOME/User+Profile+Parametershttp://help.sap.com/http://web.mit.edu/sapr3/docs/webdocs/getstarted/gsSETTINGS.html

Documents

SAP User A Ministration