What is the difference between User group in LOGON DATA tab
and user group in GROUPS tab in SU01 t code?
Answer Posted / rajesh srisailapu
Hi ,
"Groups" tab in SU01
By using "Groups" tab in SU01, we can allocate user group
to number of users at a time, this is for find the list of
users of a particular user group but we cannot restrict any
user to any region or any location.
User Group in "Logon data"
If we assign any user to User Group in Logon data of SU01,
then user will restrict to particular user group or region
or location. Whenever user trying to do any activity other
than this user group, then system will show “You are not
authorized to "XXXX user group.” Even though user have the
access for particular activity.
Ex: Let us assume some ABC Project, its having multiple
locations like India(SEC_IN), China (SEC_CN), Australia
(SEC_AU)…etc. Each location having individual security
admin with respective user groups. Now India security admin
trying to do password reset to any cross country user like
China user(as per urgency/requirement)then system will
show “You are not authorized to reset password
to “SEC_CN” user group.” Because India security admin is
assign to SEC_IN user group. like this way we can restrict
the users with User Group in Logon data of SU01.
This is the main Difference between User Group in "Logon
data" and "Groups" tab in SU01.
| Is This Answer Correct ? | 46 Yes | 4 No |
Post New Answer View All Answers
What is audit information system?
what is hypercare and go live support?
HI FRIENDS... I WANT TO KNOW FEW TICKETS ON SECURITY WITH SOLUTION.
how a t code works
Hi Experts, can any one let me know the Tables which we use for compliance calibrator & Access enforcer of grc and please let me know the background jobs of grc, Please it's urgent so please answer as soon as possible to these questions , I really appreciate your help, Thanks karunakar
How we Provided SAP Security design, configuration, and support for SAP Net Weaver systems running BI/BW 7.0 (Net Weaver 2004s)
what is the process to find that one consultant had removed a table from sap tables
How to add custon t-code to a role and how to find the auth obj of custom t-code.if the custom t-code doesnt have auth obj, will you save and generate the role?
when performing client copies what steps you need to take from CUA point of view?
Is it possible to have more than one st of org-level values in one role? Explain your answer.
When would you update a sap table directly?
When would you update a sap table directly? What precautions would you taje?
Explain snc in sap security?
what is authorization object and authorization object class?
How to find out who has deleted users in the system?