Managing Groups


After completing this lesson, you will be able to:

  • Describe the usage of groups

User Groups

The USERGROUP OPERATOR privilege authorizes a user to change the settings for a user group, and to add and remove users to/from a user group. Users with the USERGROUP OPERATOR privilege can also create and drop users, but only within the user group on which they have the USERGROUP OPERATOR privilege (CREATE USER <user_name> SET USERGROUP <usergroup_name>).

A user can have the USERGROUP OPERATOR privilege on more than one user group, and a user group can have more than one user with the USERGROUP OPERATOR privilege on it.

Creating User Groups

  1. A global user administrator (system privilege USER ADMIN) creates a user group.

    Optionally, the user administrator can set up the user group for "exclusive administration".

  2. A role developer includes the new object privilege USERGROUP OPERATOR on the user group in a role.

  3. A role administrator assigns the role to one or more users, who will be the group operators of the new user group.

Creating New Users

When a new user is created, a user group can (optionally) be specified. A user can belong to only one user group, but users do not need to belong to any user groups.

Configure the Base Setup for User Groups

You can use a wizard to quickly apply a basic configuration for user groups.

Instead of manually configuring user groups, you can use a wizard to apply SAP's recommended configuration settings. This allows you to quickly start working with user groups.

For a registered database, the UI notifies you if user group configuration was not completed using the base setup wizards. You have the option to disable these notifications.


The base setup does not guarantee that the configuration is optimal for your particular system. To optimize the configuration, it may be advisable to manually configure specific settings.

User Group Password Policies

The users of different user groups may have different requirements when it comes to passwords. For example, you may want the passwords of technical users to be very complex. A group administrator can configure group-specific values for the individual parameters of the password policy.

User Group-Specific Password Policies

Password policies can be configured per user group.

Log in to track your progress & complete quizzes