su01 - authority check for the object s_user_grp

[Former Member]

Dear Basis Gurus,

requirement:

Decentralisation of user administration. Local site admins should only be able to administrate users belonging to special user groups.

What I have done:

Generated a new role via pfcg for transaction su01 and object s_user_grp. Activity for s_user_grp = 02. Up to this point this works without any problems.

But trying to limit the role to a certain user group (s_user_grp => class), this doesn't have any effect for the local site admins. They are still able to change all user data, nevertheless if the users are member of another group or not (group membership via sugr).

Please advice.

thanks and regards..,

sven

[Former Member]

The group memebership must be declared in SU01-CLASS to take effect on S_USER_GRP.

[Former Member]

I assign the groups in SU01-Groups. This is not correct?

thanks..,

[Former Member]

Hi

You need to maintain the user group in 'Logon Data' tabpage under User group for authorization check.

Regards

Lakshmi

[Former Member]

Hi Lakshmi,

thanks! That solved my problem.

regards..,

sven