SU01 is used to create and manage individual SAP users, including roles and authorizations. SU10 allows administrators to perform the same actions for multiple users at once, saving time and ensuring consistent access. SUIM is a reporting tool that analyzes user roles and authorizations, helping identify access risks, SoD conflicts, and supporting compliance audits in SAP GRC.

1. SU01 – User Maintenance:

• Purpose: Create, change, display, lock/unlock, or delete SAP users.
• Typical Use in GRC:
  • Ensuring that users are assigned correct roles and authorizations.
  • Locking users who leave the organization (critical for access risk management).
  • Managing user master data, which is often checked in GRC for compliance.

Key Functions:

• Assign roles to users.
• Maintain user profiles.
• Set passwords and parameters.
• Lock/Unlock accounts.

2. SU10 – Mass User Maintenance:

• Purpose: Perform changes for multiple users at once.
• Typical Use in GRC:
  • Bulk updates of roles or authorizations to users.
  • Locking or unlocking groups of users (e.g., when a department leaves the company).
  • Reduces manual work and helps enforce segregation of duties (SoD) compliance efficiently.

Key Functions:

• Assign or remove roles for multiple users.
• Lock or unlock multiple users.
• Change user parameters in bulk.

3. SUIM – User Information System:

• Purpose: Reporting and analysis of user and role data.
• Typical Use in GRC:
  • Perform SoD checks and access risk analysis.
  • Identify users with critical or conflicting roles.
  • Audit user authorizations and trace role assignments.
  • Generate reports for compliance audits.

Key Functions:

• Search users by role, authorization, or profile.
• List roles by user.
• Analyze authorization assignments and usage.
• Provide SoD reports (like conflicting role assignments).

Summary:

In SAP GRC, SU01 is used for managing individual users, allowing administrators to create, modify, lock, or delete user accounts and assign roles and authorizations to ensure proper access control. SU10 extends this capability to multiple users at once, enabling bulk updates, mass role assignments, and group account management, which helps enforce compliance efficiently across departments. SUIM serves as a reporting and analysis tool, providing detailed information on users, roles, and authorizations, and is crucial for auditing, identifying access risks, and detecting Segregation of Duties (SoD) conflicts. Together, SU01 and SU10 handle user management actions, while SUIM provides insight and monitoring for compliance and risk management.