Attach a role to a user in SAP

Add a Role to a User

1.               Log on to the appropriate SAP system and the client where the user needs the role. Go to transaction SU01.

2.               On the User Maintenance: Initial Screen screen, type in the user’s name and press Enter to confirm that the user exists.

3.               Click the Change button or press Shift+F6.

4.               On the Maintain User screen, click on the Roles tab.  Fill in the name(s) in the field(s) provided, and when done press Enter.

5.               Click the Save button.

6.               Go to transaction PFCG, and on the Role Maintenance screen, type in the name of the role to which the users where added and press Enter to confirm exist of the role.

7.               Click the Change role little yellow pencil button. 

8.               On the Change Roles screen, click the User tab.  Click on User Comparison and then Complete Comparison.  Once the comparision is done, click Save one more time and you are done!

Mass User Changes

Making user changes one-at-a-time can be extremely time consuming not to mention boring.  SAP has provided mass change transaction to help eleviate the tediousness of making many user changes.  It should be noted, however, that the mass change transaction is limited as to the changes that can be made.  For example, you cannot change the password for multiple users.  Also note that it is best to make one type of mass change at a time.  For example, you need to add a new role to and delete an existing role from 20 users.  The best method to achieve this would be to first do a mass change to add the new role.  Save the changed users.  Then delete the existing role from the same 20 users. 

1.               Log on to the appropriate SAP system and the client where the user changes are to take place.

2.               Go to transaction SU10.

3.               On the User Maintenance: Mass Changes Initial Screen screen, you need to select whether you will select users based on Address Data or Authorization Data and click the appropriate button.  If you click Address Data, you can find users with any combination of First name, Last name, User ID, Company, City, Building, Room, Extension, Department, and Cost Center.  If you opt to use Authorization Data, you can specify a combination of Groups, Reference User, Authorizations, Athorization Objects, and many other fields.  For either method, fill in the fields you want to search on in the Users by Complex Selection Criteria screen, and click the Execute button.

4.               On the Users by Complex Selection Criteria screen, you can click “on” the users to be changed, or click the Select All button.  Once all the users you want to change have been selected, click the Transfer button.

5.               Back on the Maintenance: Mass Changes Initial Screen screen, you can select all the users on the screen again by clicking the Select All button or change your mind and make any last minute corrections.  Once you have all the users selected that you want to change, click User → Change.

6.               On the Mass User Changes screen, scroll through the tabs, changing data and clicking the Add or Remove button for each correction.  Please note, each SU10 batch run must use all Adds or all Removes but never a mixture.  Do all Adds in one run and then all Removes in another. Once all your changes have been made, click the Save button.

7.               On the Mass changes popup, you will see how many users you are about to change.  To make the changes, click on Yes. 

8.               On the Log Display screen, you will see a log of the changes you made.  Expand the list to see the transactional details.

9.               You may now leave the SU10 transaction.