What are user groups and how can we use them?
Your auditer asked you to implement user groups in SAP, but you have no idea what are user group. Transaction SUGR – have a look. Purpose for example is to give certain system admin rights to unlock / change password only to a given user group. You assign user group to an user id via SU01. User group can be used for different reasons and in different way. In the latest versions of SAP, actually two types of usergroup exist, the authorization user group and the general user groups. Naturally the main reason of user groups is to categorize user into a common denominator. The authorization user group is used in conjunction with S_USER_GROUP authorization object. It allows to create security management authorization by user group. e.g. you can have a local security administrator only able to manage users in his groups, Help-Desk to reset password for all users except users in group SUPER, etc… The general user group can be used in conjunction with SUIM and SU10, to select all the users i
