User administration in SAP is a central part of every ABAP or S/4HANA system. With transaction SU01, administrators have a powerful tool to create, edit, or lock user accounts, as well as maintain roles, profiles, and master data.
In this article, we provide an overview of SU01’s most important functions and show how user administration can be structured and performed efficiently.
You can start transaction SU01 directly from the command field with /nSU01. From here, administrators can:
Address Data
The Address tab contains the basic user information: name, department, function, and contact details.
Logon Data
In the Logon Data tab, you can define central settings:
SNC and Defaults
Roles and Profiles
Groups
The Groups tab is used to logically assign users to organizational units. Unlike the user groups in the Logon Data tab, these groups have no authorization relevance.
Personalization
The Personalization tab can be used to configure user-specific settings and default values for applications.
License Data
In the License Data tab, administrators maintain the contractual user type ID of an SAP user for license management and compliance purposes.
User Attributes
The User Attributes tab can optionally be maintained to control access to logs and error messages created by a specific user.
Clean user administration is essential for security and traceability in SAP systems.
With SU01, administrators can:
Note: For display-only purposes, use transaction SU01D.
You start SU01 from the command field using /nSU01.
SAP User Types define the technical nature of a user (e.g., Dialog or System). SAP User License Types, on the other hand, refer to licensing and the costs a user generates in SAP. These two topics must not be confused.
SU01D is a display-only version of SU01. It allows viewing user profiles without making changes.
User groups in the Logon Data tab control which administrators can manage those users. Groups in the Groups tab are only for logical classification and have no authorization impact.
