Skip to content

SU01 — User Maintenance

Create, modify, lock/unlock, copy, and display SAP user master records.

Purpose

SU01 is the central transaction for managing SAP user accounts. Basis and security administrators use it to create users, assign roles and profiles, reset passwords, and configure user preferences.

How to open

  • Type SU01 in the command field and press Enter
  • Enter a username in the User field and choose an action (Display, Change, Create, Copy, Delete)

Key features

  • Set validity dates (valid from / valid to) to control account activation periods
  • Assign roles and profiles on the Roles and Profiles tabs
  • Reset passwords and force a password change on next logon
  • Configure logon language, date format, and decimal notation on the Defaults tab
  • View last logon date and time and current lock status
  • Lock / unlock user accounts directly from the toolbar

Tips & shortcuts

Use SU01D for display-only access

If you only have display authorization, use SU01D instead. It has the same interface but will not prompt you to make changes, avoiding accidental modification errors.

Mass reporting with SUIM

For questions like "which users have role X?" or "who logged in last month?", use SUIM (User Information System). It provides flexible reporting across users, roles, profiles, and authorizations.

Programmatic user management

For ABAP-based user operations, use the standard BAPIs:

  • BAPI_USER_GET_DETAIL — read user master data
  • BAPI_USER_CREATE1 — create a new user
  • BAPI_USER_CHANGE — modify an existing user

See also

Comments