view a list of all users currently connected in SAP

Displaying and Dropping User Sessions

1.               Log on to any client in the appropriate SAP system.

2.               Go to transaction SM04.

3.               On the User List screen, all users currently logged on to the SAP system are displayed.  To delete a user’s session, place a √ in the □ to the left of the user to be dropped and click the Sessions button.

4.               On the Overview of Sessions popup, click on the session No to be deleted.  Click the End Session button.

5.               You will not receive a deletion confirmation message.  You may now leave the SM04 transaction.

start an audit trace for a specific user in SAP

Creating a User Audit Profile

1.               Log on to any client in the appropriate SAP system.

2.               Go to transaction SM19.

3.               From the top-most menu bar on the Security Audit: Administer Audit Profile screen, click Profile → Create.

4.               On the Create new profile popup, type in a new Profile name and click the green √ picture-icon.

5.               On the Filter 1 tab of the Security Audit: Administer Audit Profile screen, click the □ to the left of Filter active to place a √ in the box.  In the Selection criteria section, select the Clients and User names to be traced.  In the Audit classes section, click “on” all the auditing functions you need for this profile.  In the Events section, click the radio button to the left of the level of auditing you need.  Once you have entered all your trace information, click the Save picture-icon.  You will receive an Audit profile saved in the status bar at the bottom of the screen.

6.               Please note that while the user trace has been saved, it is not yet active.  To activate the user trace, see the next section Activating a User Audit Profile.

7.               You may now leave the SM19 transaction.

produce various user reports in SAP

User Information Repository Reports

1.               Log on to the appropriate SAP system and client where the user reports are to be generated.

2.               Go to transaction SUIM.

3.               On the User Information System screen, click the Infosystem authorizations entry on the navigation tree and click the double arrows pointing down picture-icon to expand the list of available reports.

4.               Click on the clock picture-icon to the left of the report you want to run.  You will be taken to a selection filter screen to customize the data you need to see on your report.  Once your report has been produced, you can print it or send it to your hard disk.

5.               You may now leave the SU01 transaction.

modify a user in SAP

Modifying a User

1.               Log on to the appropriate SAP system and the client where the user is to be changed.

2.               Go to transaction SU01.

3.               On the User Maintenance: Initial Screen screen, type in the user’s name and click the pencil picture-icon.

4.               On the Maintain User screen, click on the tabs and make your user information changes.  When you are done, click the Save picture-icon.

5.               You will receive a User saved message in the status bar at the bottom of the screen.  You may now leave the SU01 transaction.

lock all users at once in SAP

Mass User Changes

Making user changes one-at-a-time can be extremely time consuming not to mention boring.  SAP has provided mass change transaction to help eleviate the tediousness of making many user changes.  It should be noted, however, that the mass change transaction is limited as to the changes that can be made.  For example, you cannot change the password for multiple users.  Also note that it is best to make one type of mass change at a time.  For example, you need to add a new role to and delete an existing role from 20 users.  The best method to achieve this would be to first do a mass change to add the new role.  Save the changed users.  Then delete the existing role from the same 20 users. 

1.               Log on to the appropriate SAP system and the client where the user changes are to take place.

2.               Go to transaction SU10.

3.               On the User Maintenance: Mass Changes Initial Screen screen, you need to select whether you will select users based on Address Data or Authorization Data and click the appropriate button.  If you click Address Data, you can find users with any combination of First name, Last name, User ID, Company, City, Building, Room, Extension, Department, and Cost Center.  If you opt to use Authorization Data, you can specify a combination of Groups, Reference User, Authorizations, Athorization Objects, and many other fields.  For either method, fill in the fields you want to search on in the Users by Complex Selection Criteria screen, and click the Execute button.

4.               On the Users by Complex Selection Criteria screen, you can click “on” the users to be changed, or click the Select All button.  Once all the users you want to change have been selected, click the Transfer button.

5.               Back on the Maintenance: Mass Changes Initial Screen screen, you can select all the users on the screen again by clicking the Select All button or change your mind and make any last minute corrections.  Once you have all the users selected that you want to change, click User → Change.

6.               On the Mass User Changes screen, scroll through the tabs, changing data and clicking the Add or Remove button for each correction.  Please note, each SU10 batch run must use all Adds or all Removes but never a mixture.  Do all Adds in one run and then all Removes in another. Once all your changes have been made, click the Save button.

7.               On the Mass changes popup, you will see how many users you are about to change.  To make the changes, click on Yes. 

8.               On the Log Display screen, you will see a log of the changes you made.  Expand the list to see the transactional details.

9.               You may now leave the SU10 transaction.