2658656 - How to control user administration by user group and authorization object S_USER_GRP

Numerous user groups and administrators exist in the system. It may be preferable for users in a specific user group to only be administrated by specific administrators in SU01. Alternatively, as per security policies, it may be required that the user master record in a user group can only be viewed by specific administrators in SU01.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

SAP Release Independent

S_USER_GRP, user group, restrict user authorization, su01, administration, Restrict Access in SU01 , KBA , BC-SEC-USR-ADM , Users and Authorization administration , How To