User

Type

Dialog 'A'

A normal dialog user is used by one person only for all types of logon.

During a dialog logon, the system checks for expired and initial
passwords and provides an option to change the password.

Multiple dialog logons are checked and logged if necessary.

System
'B'

Use the system user type for internal system processes (-> backgroun
d
processing) or system-related processes (-> ALE, workflow, TMS, CUA).

Dialog logon (using SAP GUI) is not possible.

A user of this type is excluded from the general settings for password
validity. Only user administrators can change the password using
transaction SU01 (Goto -> Change Password).

Multiple logons are permissible.

Communication
'C'

Use users of type Communication for dialog-free communication betwee

n
systems (-> RFC or CPIC) .

Dialog logon (using SAP GUI) is not possible.

The general settings for the validity period of a password apply to

users of this type. Users of this type can change their passwords (like
dialog users). The dialogs for changing the password must be provided by
the caller (RFC/CPIC client). You can use the RFC function module
USR_USER_CHANGE_PASSWO or the RFC API function RfcOpenEx() to
RD_RFC
change the password.

Service 'S'

A user of the type Service is a dialog user that is available to an

anonymous, larger group of users. Generally, this type of user should
only be assigned very restricted authorizations.

For example, service users are used for anonymous system access using an
ITS service or a public Web service. Once an individual has been
authenticated, a session that started anonymously using a service user
 can be continued as a personal session using a dialog user (see
SUSR_INTERNET_USERS )
WITCH

During logon, the system does not check for expired and initial
passwords. Only the user administrator can change the password.

Multiple logon is allowed.

Reference 'L'

Like the service user, a reference is a general user, not assigned

user
to a particular person. You cannot log on using a reference user. The
reference user is only used to assign additional authorization.
Reference users are implemented to equip Internet users with identical
authorizations.

On the Roles tab, you can specify a reference user for additional rights
for dialog users. Generally, the application controls the allocation of
reference users. You can allocate the name of the reference user using
variables. The variables should begin with "$". You assign variables to
reference users in transaction SU_REFUSERVARI .
ABLE

This assignment applies to all systems in a CUA landscape. If the

assigned reference user does not exist in one of the CUA child systems,
the assignment is ignored.

Overvie
w

Overview of the properties of users of the different user types:

Property User Type Dialo Communicati Syste Servic

g on m e
Dialog logon (SAP GUI) X - - X
Multiple logons - X X X
RFC logon X X X X
Background job execution X - X X
Password change X X - -
Logon ticket can be generated X X - -