Users & Authorization Users must be setup and roles assigned to user master records before you can use the SAP System. A user can only log on to the system if he or she has a user master record. A user menu and authorizations are also assigned to the user master record via one or more roles.
Users in the R/3 EnvironmentPresent. Operating System OS User Server R/3 UserApplication Operating System OS User Server Dispatcher D B V ... Admin. User Database ServerDatabase Operating System OS User Server DB User
The User Master Record All user data required for R/3 System access is stored in the user master record in eight categories
Authorization Concept User master record User master record Profile Profile Authorization Authorization for Task A for Task B Action Action Transaction permitted? Authorizations assigned? Objects needing protection Vendor Material Company code Plant
Authorization Check SAP GUI Dynpro Authority User Check Context OK? No Message Yes Processing
Authorization Customer company code: Authorization object Authorization A Object class Object: Customer 0001-0009 company code Financial display, change Company CodeAccounting Activity Customer company code: Authorization B * display
Object Fields Value Meaning User Master 01 Create ACTIVITY Maintenance: 02 Change Authorizations 03 Display(S_USER_AUT) 06 Delete 07 Activate 08 Display change documents 22 Assign authorization profiles 24 Archive AUTH Limited name space for the assignment of authorization names OBJECT Authorization objects
Central User AdministrationWith central user administration, thecreation and maintenance of all usermaster data is performed in a singleR/3 System Client 100 QAS System Client 200 Client 100 Client 200 Client 300 PRD System DEV System Client 100