User creations and authorizations in ECC 6

[Former Member]

Hi,

how to create users and authorizations? is it necessary to give authorization of SAP_NEW to new users?

regards,

suresh

[manu_susankar · Accepted solution]

Hi suresh kumar,

You could find useful stuff under form the service marcket place :

Security service.sap.com/security

Security Guides service.sap.com/securityguide

Related SAP Notes service.sap.com/notes

Released platforms service.sap.com/platforms

Network security service.sap.com/network

service.sap.com/securityguide

please also go with SDN help documet, there are more stuff avilable with advanced

[Url [https://www.sdn.sap.com/irj/scn/advancedsearch?cat=sdn_library&adv=true]

Regards,

S.Manu.

[former_member86837]

SAP_NEW automatically assigns relevant authorizations to a user in cases where there have been changes to authorizations brought in by support packages or upgrades. This enables users to carry out their tasks as before even though there may be additional authorization checks required to perform the same task. SAP_NEW only allows users to execute functions which are permitted by their assigned roles and/or authorization profiles.

To create users and roles and assign roles to users (or users to roles) you can use transaction codes:

SU01 - Create / Maintain users

SU10 - Mass user maintenance

PFCG - Create roles (which themselves can consist of other roles or authorization profiles)

Keep in mind that SAP systems are based on a "Positive Authorization Principle" meaning that a user can only perform a certain task if he is specifically assigned that authorization.

Edited by: Yiannis Petevis on Jan 27, 2009 11:24 PM