What is the difference between User group in LOGON DATA tab
and user group in GROUPS tab in SU01 t code?
Answer Posted / rajesh srisailapu
Hi ,
"Groups" tab in SU01
By using "Groups" tab in SU01, we can allocate user group
to number of users at a time, this is for find the list of
users of a particular user group but we cannot restrict any
user to any region or any location.
User Group in "Logon data"
If we assign any user to User Group in Logon data of SU01,
then user will restrict to particular user group or region
or location. Whenever user trying to do any activity other
than this user group, then system will show “You are not
authorized to "XXXX user group.” Even though user have the
access for particular activity.
Ex: Let us assume some ABC Project, its having multiple
locations like India(SEC_IN), China (SEC_CN), Australia
(SEC_AU)…etc. Each location having individual security
admin with respective user groups. Now India security admin
trying to do password reset to any cross country user like
China user(as per urgency/requirement)then system will
show “You are not authorized to reset password
to “SEC_CN” user group.” Because India security admin is
assign to SEC_IN user group. like this way we can restrict
the users with User Group in Logon data of SU01.
This is the main Difference between User Group in "Logon
data" and "Groups" tab in SU01.
| Is This Answer Correct ? | 46 Yes | 4 No |
Post New Answer View All Answers
What is audit information system?
What are the upgrades happened in GRC 5.3 from GRC 5.2?
User is not there in User master record. Then how to trace the user?
How would you do the 'a user logge into production system, changes a table and logged out'. How would you track him?
Please let me know if there any vacancies for 3 years of Experienced level in SAP Security
Which transaction should not be given to BASIS and DEV team in Production?
When would you update a sap table directly?
You want to create and maintain user master record. What authorization would you need?
Can you explain secure store and forward?
Giving fire call access and extending fire call access by using VIRSA’s VFAT tool.can any one brief this
What is the maximum number of profiles in a role and maximum number of object in a role?
What authorization are required to create and maintain user master records?
Differentiate between derived role and composite role
As a SAP security consultant what is the most challenged you faced in previous company?
What happens to change documents when they are transported to the production system?