日志
SAP BW 用户类型简介
||
| [在使用SU01维护用户时，首先要选择用户类型，用户类型SAP帮助的解释为： Dialog 'A' A normal dialog user is used by one person only for all types of logon. During a dialog logon, the system checks for expired and initial passwords and provides an option to change the password. Multiple dialog logons are checked and logged if necessary. System 'B' Use the system user type for internal system processes (-> background processing) or system-related processes (-> ALE, workflow, TMS, CUA). Dialog logon (using SAP GUI) is not possible. A user of this type is excluded from the general settings for password validity. Only user administrators can change the password using transaction SU01 (Goto -> Change Password). Multiple logons are permissible. Communication 'C' Use users of type Communication for dialog-free communication between systems (-> RFC or CPIC) . Dialog logon (using SAP GUI) is not possible. The general settings for the validity period of a password apply to users of this type. Users of this type can change their passwords (like dialog users). The dialogs for changing the password must be provided by the caller (RFC/CPIC client). You can use the RFC function module USR_USER_CHANGE_PASSWORD_RFC or the RFC API function RfcOpenEx() to change the password. Service 'S' A user of the type Service is a dialog user that is available to an anonymous, larger group of users. Generally, this type of user should only be assigned very restricted authorizations. For example, service users are used for anonymous system access using an ITS service or a public Web service. Once an individual has been authenticated, a session that started anonymously using a service user can be continued as a personal session using a dialog user (see SUSR_INTERNET_USERSWITCH) During logon, the system does not check for expired and initial passwords. Only the user administrator can change the password. Multiple logon is allowed. Reference 'L' Like the service user, a reference user is a general user, not assigned to a particular person. You cannot log on using a reference user. The reference user is only used to assign additional authorization. Reference users are implemented to equip Internet users with identical authorizations. On the Roles tab, you can specify a reference user for additional rights for dialog users. Generally, the application controls the allocation of reference users. You can allocate the name of the reference user using variables. The variables should begin with "$". You assign variables to reference users in transaction SU_REFUSERVARIABLE. This assignment applies to all systems in a CUA landscape. If the assigned reference user does not exist in one of the CUA child systems, the assignment is ignored. Overview Overview of the properties of users of the different user types: Property \ User Type Dialog Communication System Service Dialog logon (SAP GUI) X - - X Multiple logons - X X X RFC logon X X X X Background job execution X - X X Password change X X - - Logon ticket can be generated X X - - 简单理解： A为会话用户，即平时通过SAP GUI登录的用户，该种类型用户检查有效期和初始密码，并可由用户自行修改密码，登录时检查已登录情况；B为系统用户，为系统内进程服务的，比如后台进程，不能使用SAP GUI，检查密码有效性，并只能有管理员修改密码，C为通讯用户，比如系统间的RFC连接，检查密码有效性，并可修改密码（通过FM或API），S 为服务用户，一个匿名的大分组用户。通常它应该受到非常严格的授权。例如，服务用户用于通过 ITS 服务来匿名访问系统。一旦验证通过，使用服务用户开始的匿名会话就可以向使用会话用户登录的个人会话一样执行。 在登录时，系统不检查有效期和初始密码，只有管理员可以修改密码。允许重复登录。L为参考用户，跟服务用户类似，参考用户用于通用用户，不指定到特定人。不能使用参考用户登录。参考用户只用来指定附加的权限。它用于互联网上相同授权的用户。在角色选项卡，可以为会话用户指定参考用户来添加附加权限。一般来说，应用控制参考用户的分配。可以用事务码SU_REFUSERVARIABLE 来维护参考用户和会话用户的对应。这种分配主要用户 CUA 场景的所有系统。如果被分配的参考用户不存在于某个 CUA 子系统，则分配被忽略。 |
