Answer / gaurav shrivastava

Further more adding to the response and replying to above
post : The user group in Logon tab is user's primary user
group. When you go to maintain or create user then the
check is made whether u have access to that user group in
S_USER_GRP or not. For you also when someone change or
maintains youe umr then for that user your user grp is
checked. Logon tab contains that user group. Also this
enables you to assign the user group you have here to other
users.


The users who do not have any user grp assigned to them can
be maintained by all administrators.

In groups tab we can maintain more tha one user group for a
user. Those are called secondary user groups.

Answer / mar

The diff between Logon data group you can map one user with
only one group.But in groups you can map one user with
multiple group.

Answer / shad

further to above replies,
As per my understanding Authorization user group is added in
Logon data tab whereas general user group is added in Groups
tab. User can have only one authorization user group whereas
user can have multiple general user group.

With authorization user group you can segregate user
maintenance. for ex: In a large organization, you may
distribute users into different groups and each group can
further be managed by an Administrator

Answer / sanketshingote

User Group under Logon data - It is used for Authorization check. Auth. Object S_USER_GRP(ACTVT, CLASS) will be checked. This is helpful to restrict admins to particular group. They cannot access the information from other group.

Groups Tab - This is a general purpose group. This is not used for Authorization check at all. Anything maintained or not maintained here doesn't make any difference. This was helpful when SUIM T-code was used for searching users with Users with complex selection criteria to get details of user assigned to particular group. This not not used much.

Example for User Group under Logon Data Tab:
Assume you have a Basis team and want to just access the users for this team, you will just create a group(ex.: Basis) for all these users and restrict the admin to just have access to the group(ex. Basis) with these users. The admin will then have access to only users under this group and cannot access other users at all.

Answer / guest

Further more adding to the response and replying to above
post : The user group in Logon tab is user's primary user
group. When you go to maintain or create user then the
check is made whether u have access to that user group in
S_USER_GRP or not. For you also when someone change or
maintains youe umr then for that user your user grp is
checked. Logon tab contains that user group. Also this
enables you to assign the user group you have here to other
users.


The users who do not have any user grp assigned to them can
be maintained by all administrators.

In groups tab we can maintain more tha one user group for a
user. Those are called secondary user groups.

Answer / annavarapu

the group that are showing in logon data is identification of user which group he is belongs to and the group tab is to add that user in multiple groups...like ex:-
If i am a basis employee we will group him at logon tab...
and we want to add this guy into more groups we will add those at group tab ......

Answer / guest

pls answer 4 time asking this question pls send to clear
answer with exampls

Answer / guest

Instead of giving a user group in logon data tab we can
specify it in gruops tab, then also the identification of
user group is same...what is the difference in this case?
can any one please answer this. Thanks in advance

What is a Role in Sap Security and Types of Roles and use of the role?

2 Answers  

Is there a table for authorizations where I can quickly see the values entered in a group of fields?

0 Answers  

can u tell me some of the password related parameters ?

5 Answers   IBM,

How can we maintain Organizational values? How can we create Organizational values? What is the purpose of these Org. values?

2 Answers   Satyam,

what is difference between master role and derived role

3 Answers   IBM,

Hi I cleared all rounds of Accenture but my preffered location was Gurgaon, as they dint had anything for me in Delhi /NCR they have put me on hold. I am worried will they call me again. please help

2 Answers  

1.WHAT IS DIFFERENCE B/W OWNER,CONTROLER AND ADMINISTRATOR IN FF? 2.WHAT IS THE DIFFERENCE B/W THESE PERSONS ROLES? 3.WHAT IS THE ONLINE AND OFFLINE RISKS?

5 Answers  

How many profiles we can add to role and if already user has 312 profiles the, how will you provide more profile to user?

2 Answers   Cap Gemini,

The user have auth-obj in his profile but he's not able to execute, if he run su53 he's not getting the error and also we cannot able to execute st01 if I do user buffer also its not fetching any data what should I do?

2 Answers   Aptron, eCare, Volvo,

Give some examples for Remediation and Mitigation in RAR?

1 Answers   IBM,

(1)Difference between usobt_c and usobx_c?(2)What are usobt and usobx tables for?(3)Difference between usobt and usobt_c?(4)Se93.How u create custom t-codes?(5)Difference b/w customizing request and workbench request?(6)To trnsprt sU24 setting which is used is it customizing or workbench request?(7)If we add org level elements in a master role will it reflect in child role and how AGR_1252 will act as a barrier?(8)How to do mass user to role assignment using secatt, will u use su01 or su10?Explain why you will use SU10 not SU01?(9)Can SU10 can be used for mass password reset?Why not?(10)If you want to reset the password for say 100 users in Production how will you do?(11)Expalian Steps 2A and 2B in SU25?

6 Answers   HCL,

How to find ECC system, GRC system and BI system ?

0 Answers