Function and Role of User Types and DDIC User

Is there a way of masking or hiding the User Menus as we are using SAP Standard Menu instead of User Based Menus?

To put it simple, when the user logs on to the system he should have only the SAP Standard Menu. 

You have two ways to control this :

1.  Default hide for all the SAP users.

Goto SM30 and edit the table SSM_CUST and set ALL_USER_MENUS_OFF = YES and transport the same in production server.

or

2.  Hide based on individual SAP users.

you can also try SM30 and maintain table USERS_SSM for individual users.

In “USER MAINTENANCE- SU01” –> in the “logon tab” there are 5 different “user type”

1. dialog
2. system
3. communication
4. service
5. reference

Kindly mention the function and role of all the above mentioned user types specifically and hows is one user type different from another.

These are as follows:-

1. Dialogue:-
For this kind of users:-
GUI login is possible.
Initial password and expiration of passowrd are checked.
Multi GUI logins are checked.
Usage:- These are used for GUI logins.

2. System
For this kind of users:-
GUI login is not possible.
Initial password and expiration of passowrd are not checked.
Usage:- These are used for internal use in system like background jobs.

3. Communication
For this kind of users:-
GUI login is not possible.
Users are allowed to change password through some software in middle tier.
Usage:- These are used for login to system through external systems like web application

4. Service
For this kind of users:-
GUI login is possible.
Initial password and expiration of passowrd are not checked.
Multiple logins are allowed.
Users are not allowed to change the password. Only admin can change the password
Usage:- These are used for anonymous users. This type of users should be given minimum authorization.

5. Reference
For this kind of users:-
GUI login is not ible.
Initial password and expiration of passowrd are not checked.
Usage:- These are special kind of users which are used to give authorization to other users.

What are the functions of DDIC user in Production system?

There are many functions of DDIC user.

For E.g.. When you configure TMS you won’t be able to configure it using sap*. For this you need a user who has access to Data dictionary and ABAPrepository Object like DDIC user or user with sap_all and sap_new permission.

2) When we install R/3 in Landscape then we need to configure TMS.  With the help of default user DDIC we can configure s_trnsprt and s_cts_admin. We cannot create new user for our client( Client of Company ) as creating new user gets charged.

Welcome to Sap Learning dot com ! This is your very first post. Click the Edit link to modify or delete it, or start a new post. If you like, use this post to tell readers why you started this blog and what you plan to do with it.

Happy blogging!