Create User Group for authorization check

[#1]

Hello everyone,

I know that there are two types of User Groups.:

1. "User group for authorization check" on the SU01 logon data tab the S_USER_GRP object.

2. "General user groups" on the SU01 roups tab assigned via transaction SUGR.

I need to create a "User group for authorization check" to be assigned in the SU01 logon data tab. I know that you use SUGR to create the General user group, but where do you create the "User group for authorization check"?

Thank you! : )

[Former Member]

I created a user group called SYSTEM and assigned all our companies system accounts to it. Two examples of additional SYSTEM accounts I added to the SYSTEM user group are: DDIC & SAPBATCH. I did not register this group or apply any special conditions. Since doing so, several system accounts constantly become locked.

Is it safe to delete the SYSTEM user group?

Please assist...

[Former Member]

Hello Keith,

you can delete usergroup SYSTEM as soon as there are no assignments of users to that group.

The usergroup was created by you and can also be maintained/deleted by you.

Please note that DDIC is a predelivered SAP System User with standard assignment to user group SUPER. The user is mostly used for activation processes of repository objects, installations and upgrade. The user group SUPER shouldn't be removed at all as there are hardcoded checks on that usergroup in the coding. Pease assign usergroup SUPER again and your locking issues should be fixed.

regards

Johannes