Users & Authorization Users must be setup and roles assigned to user master records before you can use the SAP System. A user can only log on to the system if he or she has a user master record. A user menu and authorizations are also assigned to the user master record via one or more roles.

Users in the R/3 Environment Database Server Database Server Operating System Application Server Present. Server R/3 User OS User DB User OS User Admin. User Dispatcher...V D B

The User Master Record All user data required for R/3 System access is stored in the user master record in eight categories

Types of users

User master record Authorizations assigned? Objects needing protection Vendor Company codePlant Material Action Transaction permitted? Authorization Concept Profile Authorization for Task A Authorization for Task B Profile Action

Authorization Check SAP GUI OK? Authority Check No Processing User Context Message Yes Dynpro

Financial Accounting Authorization display, change Customer company code: Authorization A Customer company code: Authorization B * display Object: Customer company code Company Code Activity Authorization object Object class Authorization Objects

Object Fields Value Meaning User Master Maintenance: Authorizations (S_USER_AUT ) 01Create 02Change 03Display 06Delete 07Activate 08Display change documents 22Assign authorization profiles 24Archive ACTIVITY Authorization objects Limited name space for the assignment of authorization names AUTHOBJECT User Administration Authorizations

Central User Administration Client 100 PRD System Client 100 Client 200 QAS System Client 100 Client 200 Client 300 DEV System With central user administration, the creation and maintenance of all user master data is performed in a single R/3 System

Information System