Creating and Assigning S-Users

To engage in a digital way between customers and SAP, a login and central user is needed. This support user (often called as S-User) accesses the SAP Support Portal. In case you are a new customer, SAP has created this user-account (S-User) for you which you have defined in the initial software subscription contract. This user has the permissions to create additional users and to grant permissions in the support portal (e.g., information on software contracts, invoices or support services).

S-user ID authorization management deals with permissions that are required to fulfill certain support-related tasks using the support applications that are offered in SAP for Me. Most authorizations contain not only the user's right to perform a specific task, but also the level at which the user can exercise this right. Example: A user may be allowed to create cases for one SAP product that your company has licensed, but not for others.

With SAP Sports One, S-users are authorized to create support tickets. The creation of support tickets and the topic of SAP Embedded Support will also be covered in this unit.

Sometimes, you might need to add new S-users or remove existing ones within your organization. In this lesson, we’ll show you how to manage S-users in SAP for Me, all from the perspective of being an S-user yourself.

Using the User Management on SAP for Me, you can request S-user IDs for your colleagues and assign them the required authorizations. The new user will receive an e-mail with an activation link, which is valid for 10 days. Once the S-user ID has been generated, the user is removed from the Requested Users list and displayed under the Users tab instead. Please note that for security reasons SAP is not entitled to create or administer S-users for customers.

To manage S-users, you first need to create an authorization package, which can then be assigned to the S-user. You can find a KBA on how to create this authorization package on SAP for Me (2629344 - How to create an Authorization Package and assign it to S-user ID(s))

Sometimes, it might happen that existing S-users have incorrect authorizations. Here’s a KBA describing how you can update the authorization packages for an S-user (1511008 - How to add or change S-user ID authorizations)

When a user no longer works for your company or does not need access to SAP support applications anymore, you are responsible for deleting his S-user ID to prevent unauthorized access. Users can be deleted using User Management on SAP for Me. They are then listed in the Deleted Users section of this application for twelve months and cannot be reactivated.

In this lesson, we have taken a closer look at the S-users. The SAP Sports One user management is explored in more detail in Managing SAP Sports One Users and User On-and Offboarding. As part of this, we will delve into the SAP Identity Authentication Service (IAS), which serves as a user authentication tool that ensures only authorized users can access SAP Sports One.