So, What are user groups and how can we use them?
Transaction SUGR is used for User Groups.
User group can be used for different reasons and in different way.
In the latest versions of SAP, there are two types of usergroups
The authorization user group &
The general user groups
Naturally the main reason of user groups is to categorize user into a common denominator.
The authorization user group is used in conjunction with S_USER_GROUP authorization object. It allows to create security management authorization by user group. e.g. you can have a local security administrator only able to manage users in his groups, Help-Desk to reset password for all users except users in some group.
The general user group can be used in conjunction with SUIM and SU10, to select all the users in a specific group. User can only be member of one authorization user group but several general user group.
One of the Primary uses of user groups is to sort users into logical groups.
This allows users to be categorised in a method that is not dependent on roles and Responsibilities and Profiles.
User Groups also allow segregation of user maintenance, this is especially useful in a large organization as you can control who your user admin team can maintain – an example would be giving a team leader the authority to change passwords for users in their team.