---
description: Following are the detailed steps to Create a user in SAP su01
title: "SU01: How to Create a New User in SAP"
image: https://www.guru99.com/images/sap-su01-create-a-user.png
---

[Skip to content](#main)

**⚡ Smart Summary**

SU01 is the central SAP transaction for creating and maintaining user master records. Creating a new user in SAP establishes secure system access, assigns the correct user type, and links the roles and profiles that govern every authorization.

- 🔑 **Transaction Code:** Execute T-code SU01 to open User Maintenance, enter a unique user ID, and click Create.
- 📇 **Address Data:** Complete the Address tab with the last name and contact details before the record can be saved.
- 👤 **User Type:** Select Dialog, System, Communication, Service, or Reference on the Logon Data tab to match the account purpose.
- 🔒 **Initial Password:** Set a temporary password that the system forces the user to change at first logon.
- 🛡️ **Roles and Profiles:** Assign roles on the Roles tab; SAP generates and links the underlying authorization profiles automatically.
- ⚠️ **Elevated Access:** Reserve SAP\_ALL and SAP\_NEW for administrators only, because they grant unrestricted system authorization.
- 🤖 **Automation:** Provision accounts at scale with SU10 and identity provisioning services instead of manual entry.

Read More

![How to Create a New User in SAP using SU01](https://www.guru99.com/images/sap-su01-create-a-user.png)

User administration is one of the first tasks every SAP Basis or security administrator performs. Following are the detailed steps to create a user in SAP, together with the key concepts—user types, roles, profiles, and best practices—that keep each account secure and compliant.

## What is SU01 in SAP?

SU01 is the SAP transaction code for **User Maintenance**. Administrators use it to create, display, change, lock, unlock, copy, and delete individual user master records in an SAP ABAP system. The user master record is the object that lets a person or a service log on and defines what that account is allowed to do.

A single SU01 record stores several groups of information: address data such as name and email, logon data including the user type and password, the user group used for administration, validity dates, and the assigned roles and profiles that carry authorizations. Because SU01 controls both access and authorization, it is a core tool for every [SAP Basis](https://www.guru99.com/sap-basis-training-tutorials.html) and security team. Correctly maintained records keep the system compliant with audit requirements and prevent users from receiving more access than their job demands.

## Steps to Create a User in SAP

The following eight steps walk through the complete process of creating a new user inside transaction SU01, from executing the T-code to saving the finished master record.

**Step 1)** Execute T-code SU01

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_1.png)

**Step 2)**

1. Enter **Username** which you want to create.
2. Click the create button

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_2.png)

**Step 3)** In the next screen

1. Click the **Address** tab.
2. Enter details

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_3.png)

**Step 4)** Choose the user type in **Logon Data** tab.

There are 5 types of users in sap:-

1. **Dialog user**: – Normally it is used for interactive system access from [GUI](https://www.guru99.com/sap-gui-tutorial.html) (used for human users)
2. **System user**: – Normally it is used for Background processing, communication within a system.
3. **Communication user**: – It is used for external [RFC](https://www.guru99.com/rfc-remote-function-call.html) calls.
4. **Service user**: – Dialog user available to a larger, anonymous group of users.
5. **Reference user**: – General, non-person related users that allows the assignment of additional authorizations. Example, Internet users created with transaction SU01. No logon is possible.

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_4.png)

**Step 5)** Type the **initial password** for 2 times.

On first logon of the new user, system will ask to reset the password.

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_5.png)

**Step 6)**

1. Select the roles tab
2. Assign roles as per requirements

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_6.png)

**Step 7)**

1. Select the **profiles** tab
2. Assign profiles as per requirements

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_7.png)

You can assign **SAP\_ALL** and **SAP\_New** profile to user for **full authorization.**

- **SAP\_ALL**:You assign this profile to users who are to have all R/3 authorizations, including super-user authorization.
- **SAP\_NEW**:You assign this profile to users who have access to all currently unprotected components. The SAP\_NEW profile grants unrestricted access to all existing functions for which additional authorization checks have been introduced. Users can therefore continue to work uninterrupted with functions which are subject to new authorization checks which were not previously executed.

**Step 8)**

1. Press **save**
2. Then the** back button (F3)** button

[![SU01:Create a New User in SAP]()](https://www.guru99.com/images/sap/2013/05/051313_1225_8.png)

User will be created!

**Don't Miss:**

- [What is Client? How to Create a New Client in SAP SCC4](https://www.guru99.com/create-new-client.html)
- [SAP TMS (Transport Management System) Tutorial](https://www.guru99.com/transport-management-system-tms.html)
- [How to Configure & Test RFC Connection in SAP – SM59](https://www.guru99.com/how-to-configure-and-test-rfc.html)
- [SAP Basis Tutorial PDF – Basics for Beginners (FREE Download)](https://www.guru99.com/sap-basis-pdf.html)

## Difference Between Roles and Profiles in SAP

Steps 6 and 7 above assign roles and profiles, but the two objects are not the same. Understanding the difference helps you grant access safely instead of over-authorizing an account.

A **profile** is a low-level, technical object that contains the actual authorization values the system checks at runtime. A **role** is a higher-level container built in the Profile Generator (PFCG); it stores the role name, description, business purpose, menu, and the authorization data. When you generate a role, SAP automatically creates its profile, so assigning a role in SU01 assigns the underlying profile indirectly. For day-to-day administration, always assign roles rather than raw profiles, because roles are easier to document, transport, and audit.

| Aspect | Role | Profile |
| --- | --- | --- |
| Level | High-level business object | Low-level technical object |
| Created with | Profile Generator (PFCG) | Generated automatically from a role |
| Contains | Menu, description, and authorization data | Authorization values checked at logon |
| Assigned in SU01 | Roles tab | Profiles tab |
| Best practice | Preferred for user assignment | Assigned indirectly through roles |

## SU01 vs SU10: Single vs Mass User Maintenance

SU01 maintains one user at a time, which is ideal when you create or edit a single account. When the same change must reach many users—for example assigning a role during a project rollout or a reorganization—transaction SU10 performs the update for a selected list of users in one operation. Both transactions edit the same user master records, so the choice depends on how many accounts you need to touch.

| Criteria | SU01 | SU10 |
| --- | --- | --- |
| Scope | One user per transaction | Many users at once |
| Best for | Creating or editing a single account | Mass role or lock changes |
| Typical use | New hire, single correction | Project rollout, reorganization |
| Data maintained | Full user master record | Selected fields across users |

## Best Practices for Creating Users in SAP

A consistent process keeps user administration secure and audit-ready. Apply the following best practices whenever you create an account in SU01:

- **Use a naming convention:** Adopt a standard user ID format so accounts are easy to identify and report on.
- **Assign a user group:** Group users by department or function to simplify management and delegated administration.
- **Prefer roles over profiles:** Grant access through roles built in PFCG rather than direct profile assignment.
- **Apply least privilege:** Give only the authorizations a job requires, and avoid SAP\_ALL for regular users.
- **Set validity dates:** Restrict temporary or contractor accounts with Valid From and Valid To dates.
- **Review regularly:** Audit users, roles, and locked accounts periodically to keep the system aligned with your [SAP Security](https://www.guru99.com/overview-of-sap-security.html) policy.

## FAQs

🧬 Can you copy an existing user to create a new one in SAP?

Yes. In SU01, enter a new user ID, then use the Copy option and specify a reference user. SAP duplicates selected data such as roles, profiles, and defaults, which speeds up creating similar accounts and reduces manual entry errors.

🗓️ How do you set a validity period for a SAP user?

On the Logon Data tab, enter the Valid From and Valid To dates. Leaving both fields blank creates a permanent account, while dates restrict temporary or contractor access. SAP automatically deactivates the user after the end date passes.

🛡️ Why should you avoid assigning SAP\_ALL to normal users?

SAP\_ALL grants every authorization in the system, including super-user rights. Assigning it to regular users creates serious security and audit risks. Best practice is to build role-based access and reserve SAP\_ALL for emergency or administrator accounts only.

🤖 Can AI or automation create SAP users without SU01?

Yes. Large SAP landscapes automate account creation using identity provisioning services and SCIM APIs that synchronize users from a central directory. [Artificial intelligence](https://www.guru99.com/artificial-intelligence-tutorial.html) further assists by flagging anomalies, while administrators still use SU01 and SU10 to refine roles.

✨ Does the SAP Joule AI assistant handle user administration?

Not on its own. [SAP Joule](https://www.sap.com/products/artificial-intelligence/joule-studio.html) is a generative AI copilot that runs actions with the signed-in user’s existing authorizations, so it respects SU01 role controls. Administrators still create and govern accounts through standard identity and security tools.

#### Summarize this post with:

ChatGPTPerplexityGrokGoogle AI

**Stay Updated on AI** **Get Weekly AI Skills, Trends, Actionable Advice.**

##### Sign up for the newsletter

Subscribe for Free

You have successfully subscribed.  
Please check your inbox.

![AI-Newsletter]() Chosen by over **350,000+** professionals

[Scroll to top](#wrapper)

×

Search for:

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://www.guru99.com/#organization","name":"Guru99","sameAs":["https://www.facebook.com/Guru99Official","https://twitter.com/guru99com"],"logo":{"@type":"ImageObject","@id":"https://www.guru99.com/#logo","url":"https://www.guru99.com/images/guru99-logo-v1-150x59.png","contentUrl":"https://www.guru99.com/images/guru99-logo-v1-150x59.png","caption":"Guru99","inLanguage":"en-US"}},{"@type":"WebSite","@id":"https://www.guru99.com/#website","url":"https://www.guru99.com","name":"Guru99","publisher":{"@id":"https://www.guru99.com/#organization"},"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https://www.guru99.com/images/sap-su01-create-a-user.png","url":"https://www.guru99.com/images/sap-su01-create-a-user.png","width":"700","height":"250","caption":"SAP SU01: Create a User","inLanguage":"en-US"},{"@type":"BreadcrumbList","@id":"https://www.guru99.com/how-to-create-a-user-2.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":"1","item":{"@id":"https://www.guru99.com","name":"Home"}},{"@type":"ListItem","position":"2","item":{"@id":"https://www.guru99.com/sap-basis","name":"SAP - Basis"}},{"@type":"ListItem","position":"3","item":{"@id":"https://www.guru99.com/how-to-create-a-user-2.html","name":"SU01: How to Create a New User in SAP"}}]},{"@type":"WebPage","@id":"https://www.guru99.com/how-to-create-a-user-2.html#webpage","url":"https://www.guru99.com/how-to-create-a-user-2.html","name":"SU01: How to Create a New User in SAP","dateModified":"2026-10-09T12:06:24+05:30","isPartOf":{"@id":"https://www.guru99.com/#website"},"primaryImageOfPage":{"@id":"https://www.guru99.com/images/sap-su01-create-a-user.png"},"inLanguage":"en-US","breadcrumb":{"@id":"https://www.guru99.com/how-to-create-a-user-2.html#breadcrumb"}},{"@type":"Person","@id":"https://www.guru99.com/author/editorial","name":"Editorial Team","url":"https://www.guru99.com/author/editorial","image":{"@type":"ImageObject","@id":"https://www.guru99.com/images/favicon-new-logo.png","url":"https://www.guru99.com/images/favicon-new-logo.png","caption":"Editorial Team","inLanguage":"en-US"},"sameAs":["https://www.guru99.com/editorial-team"],"worksFor":{"@id":"https://www.guru99.com/#organization"}},{"articleSection":"SAP - Basis","headline":"SU01: How to Create a New User in SAP","description":"Following are the detailed steps to Create a user in SAP su01","keywords":"sap-basis, sap","speakable":{"@type":"SpeakableSpecification","cssSelector":[".entry-title",".summary"]},"@type":"Article","author":{"@id":"https://www.guru99.com/author/editorial","name":"Editorial Team"},"dateModified":"2026-10-09T12:06:24+05:30","image":{"@id":"https://www.guru99.com/images/sap-su01-create-a-user.png"},"copyrightYear":"2026","name":"SU01: How to Create a New User in SAP","subjectOf":[{"@type":"HowTo","name":"How to Create a New User in SAP","description":"Following are the detailed steps to Create a new user in SAP","step":[{"@type":"HowToStep","name":"Step 1) Execute T-code SU01","text":"In the first step, Execute T-code SU01","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_1.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step1"},{"@type":"HowToStep","name":"Step 2) Enter Username","text":"Next step, Enter Username which you want to create.","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_2.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step2"},{"@type":"HowToStep","name":"Step 3) Click the Address tab","text":"In the next screen Click the Address tab and Enter Details.","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_3.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step3"},{"@type":"HowToStep","name":"Step 4) Click on Logon Data tab","text":"Click on Logon Data tab and enter details.","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_4.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step4"},{"@type":"HowToStep","name":"Step 5) Type the initial password for 2 times","text":"On first logon of the new user, system will ask to reset the password.","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_5.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step5"},{"@type":"HowToStep","name":"Step 6) Select the roles tab","text":"in this step, Assign roles as per requirements","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_6.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step6"},{"@type":"HowToStep","name":"Step 7) Select the profiles tab","text":"Now, Assign profiles as per requirements","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_7.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step7"},{"@type":"HowToStep","name":"Step 8) Press save","text":"Now, Then the back button (F3) button, User will be created!","image":{"@type":"ImageObject","url":"https://cdn.guru99.com/images/sap/2013/05/051313_1225_8.png"},"url":"https://www.guru99.com/how-to-create-a-user-2.html#step8"}]},{"@type":"FAQPage","mainEntity":[{"@type":"Question","name":"Can you copy an existing user to create a new one in SAP?","acceptedAnswer":{"@type":"Answer","text":"Yes. In SU01, enter a new user ID, then use the Copy option and specify a reference user. SAP duplicates selected data such as roles, profiles, and defaults, which speeds up creating similar accounts and reduces manual entry errors."}},{"@type":"Question","name":"How do you set a validity period for a SAP user?","acceptedAnswer":{"@type":"Answer","text":"On the Logon Data tab, enter the Valid From and Valid To dates. Leaving both fields blank creates a permanent account, while dates restrict temporary or contractor access. SAP automatically deactivates the user after the end date passes."}},{"@type":"Question","name":"Why should you avoid assigning SAP_ALL to normal users?","acceptedAnswer":{"@type":"Answer","text":"SAP_ALL grants every authorization in the system, including super-user rights. Assigning it to regular users creates serious security and audit risks. Best practice is to build role-based access and reserve SAP_ALL for emergency or administrator accounts only."}},{"@type":"Question","name":"Can AI or automation create SAP users without SU01?","acceptedAnswer":{"@type":"Answer","text":"Yes. Large SAP landscapes automate account creation using identity provisioning services and SCIM APIs that synchronize users from a central directory. Artificial intelligence further assists by flagging anomalies, while administrators still use SU01 and SU10 to refine roles."}},{"@type":"Question","name":"Does the SAP Joule AI assistant handle user administration?","acceptedAnswer":{"@type":"Answer","text":"Not on its own. SAP Joule is a generative AI copilot that runs actions with the signed-in user's existing authorizations, so it respects SU01 role controls. Administrators still create and govern accounts through standard identity and security tools."}}]}],"@id":"https://www.guru99.com/how-to-create-a-user-2.html#schema-31099","isPartOf":{"@id":"https://www.guru99.com/how-to-create-a-user-2.html#webpage"},"publisher":{"@id":"https://www.guru99.com/#organization"},"inLanguage":"en-US","mainEntityOfPage":{"@id":"https://www.guru99.com/how-to-create-a-user-2.html#webpage"}}]}
```