Terms and status messages

Systems, clients and accounts

• SAP system: The SAP environment identified by its system ID, such as DEM. Choose its SAP Logon entry when adding a connection.
• Client: The numbered client within that system, such as 100. An account belongs to a specific system and client.
• Account: A SAP user record. The same user ID in two clients identifies two separate accounts. Use the system and client columns to select the intended account.
• Connection: The open connection from userXpress to one SAP client, authenticated as a SAP user. Connected Systems lists the connections available for your work.
• AutoStart: Saved connections that userXpress opens at startup when AutoStart is enabled. Manage them in Control Panel → AutoStart Systems.
• Passphrase: The local password you enter to unlock userXpress. SAP connections use their configured SAP authentication. Use Session Password on the main toolbar to change the passphrase.

See Connect to SAP for connection and AutoStart procedures.

Filters, selection and queries

• Column filter: A condition on a table field, such as Client equals 100. Use it to narrow the displayed rows.
• Selected rows: Rows chosen for an action. In the Global User Table, use the row checkboxes. Each task guide identifies whether its command uses selected rows or the filtered list.
• Query: A set of filter conditions. Save it under My Queries to apply the same conditions again. Saved conditions are evaluated against the available data when you reuse them.
• AND: Every condition in the group must match. Use it for requirements that apply together.
• OR: At least one condition in the group must match. Use it for alternatives, such as either of two user groups.
• Role content filter: A query against the authorizations or menu transactions maintained in roles. Use it when the role’s name alone does not identify what you need.

For a worked example with nested AND/OR groups, follow Create advanced user queries. For role content, follow Search role content.

Roles and authorization searches

• Role assignment: The link between a SAP account and a role, with its assignment validity dates. View it in the role assignment report.
• Composite role: A role that groups single roles for assignment together. Search its member single roles when investigating maintained authorizations.
• Authorization object: A set of authorization fields checked together. In the role content editor, keep requirements for the same authorization inside one object condition.
• Authorization field: One part of an authorization, such as an activity or an organizational value. Choose the field and comparison when building a content condition.
• Covers value: A comparison that accepts maintained values, intervals or wildcards covering the requested value. For example, a maintained interval from 01 to 03 covers 02.
• Menu transaction: A transaction code listed in the role’s menu. Choose this condition when finding roles that contain a particular menu entry.
• CUA: Central User Administration. SAP distributes user data between a central system and child systems according to field-distribution settings. Use the CUA view to identify where a field is maintained.

The comparison reference explains exact text, ranges, wildcard coverage and negative conditions.

Password terms

• Initial password: A password set for the user’s next password logon. A dialog user changes it at that logon. Use it when resetting a forgotten password.
• Productive password: A password the account can continue using without the initial-password change at its next logon. Use it for accounts whose authentication requires that behavior, subject to SAP’s password policy.
• Deactivated password: Password-based logon is disabled for the account. Configured single sign-on remains available.

See Lock accounts and manage passwords for the actions and their results.

Find a status explanation

Use the guide for the window showing the status:

• Loading systems: Waiting, Loading, completed results, warnings and failures. For a failed client, open its Details message.
• Control Panel: Connection and AutoStart status, including interrupted connections and CUA indicators.
• Global User Table: Locks, Online, CUA and row messages. Point to a text cell to read a row message, or select one account and open Full Message.
• Role content query: Active, paused, modified and outdated results. For Incomplete results, open Details… to distinguish confirmed matches from unverified roles.
• Mass User Create: Creation messages and saved results.
• Mass Changes: Update results for each account and requested change.
• Activity History: Operation records and messages for the session.