SAP tableObjectUSR01ModuleSECURITY_GRC

USR01 table — USR01 user master runtime and format defaults

USR01 is a legacy user master table holding per-user, per-client presentation defaults such as logon language, date format, decimal notation, start menu and default spool device. It is not an authorization table. Password and validity data live in USR02, role assignment in AGR_USERS. On current releases the table still exists but is largely a historical artifact rather than the authoritative source for these settings.

USR01 stores format and presentation defaults for a single user, separate from the logon and authorization data held elsewhere in the user master. This page covers which fields are genuinely reliable, how the table is joined, and why it is frequently misread as a security-relevant table when it is not.

Reviewed by an ERPClimb SAP consultant on 15 Sept 2026· 1,012 words

What it stores

One row in USR01 represents the presentation and runtime defaults for a single user in a single client, dating from before the user master was consolidated into the tables used today. It records things like the logon language the user prefers, the date and decimal format used to render numbers and dates on screen, the initial menu shown at logon, and a default output device for printing. It does not carry the password hash, account validity dates, user type, or any authorization assignment. Consultants encounter it mainly when chasing a display formatting complaint, or when comparing what a user sees against what SU01 shows on the defaults tab, since the SU01 screen surfaces some of this data even though the underlying persistence has shifted for parts of it.

Key fields

  • MANDT - client, part of the key alongside the user name
  • BNAME - user name, the join key to every other user master table
  • LANGU - logon language code the user is defaulted into at sign-on
  • START_MENU - the initial menu code shown after logon, before role menus or parameter overrides take effect
  • DATFM - date format setting used for date field display
  • DCPFM - decimal notation setting, comma versus period as decimal separator

How it joins the data model

  • USR01-BNAME = USR02-BNAME joins the format defaults to the logon and password administration record for the same user
  • USR01-MANDT = USR02-MANDT keeps the join within the same client, since neither table is cross-client
  • USR01-BNAME = USR21-BNAME joins to the address assignment record when chasing the person behind the user ID
  • USR01-BNAME = AGR_USERS-UNAME is used indirectly when a formatting ticket turns out to actually be a role menu question rather than a USR01 setting

How to read it safely

Always restrict by MANDT first, then BNAME. The table is one row per user per client, so it is small and a full table scan causes no performance concern on its own; the risk is not selectivity, it is misinterpretation. Do not read USR01 in isolation and conclude anything about what the user currently sees, because several of these settings can be overridden at session level by user parameters, by role-driven menus, or by newer personalization stores that were introduced after this table stopped being the sole source. Treat a USR01 read as one input among several, not the final answer.

How to prove it in the data

A user reports numbers displaying with the wrong decimal separator after logon. Select USR01 for MANDT equal to the working client and BNAME equal to the user ID, and inspect DCPFM. Compare that value against what is shown on the SU01 defaults tab for the same user rather than assuming the table value is what is actually rendered, since a personalization override or a different logon path can present a different value even though USR01 has not changed.

ECC vs S/4HANA

USR01 continues to exist on S/4HANA for compatibility, but it should not be treated as the primary source for user format defaults on current releases. The SU01 interface and the underlying user administration function modules manage the authoritative data, and some of what USR01 historically held has effectively been superseded in practice. There is no CDS compatibility view marketed specifically for this table, and no functional reshaping has been documented; it is simply a table whose relevance has diminished rather than one that has been formally replaced.

Common pitfalls

  • Treating USR01 as security-relevant. It carries no authorization or role data; a locked account, an expired password, or a missing role assignment will never show up here, and time spent reading this table during an access-denied incident is time wasted.
  • Editing the table directly through a table maintenance transaction to fix a formatting complaint. Any change should go through SU01 so that dependent updates and downstream synchronization happen correctly; a direct table edit can leave the user master in an inconsistent state that is hard to diagnose later.
  • Assuming the START_MENU field is what a user currently sees at logon. Role-based menus, parameter ID overrides, and launchpad configuration on newer stacks can all supersede it, so the field describes a fallback, not the live experience.
  • Assuming the table is still fully populated and authoritative on a current system. Some of the personalization it used to hold has moved to other stores over the years, so an empty or stale-looking field here does not necessarily mean the user has no preference set.
  • Forgetting the client boundary when comparing behavior across a landscape. A user with the same BNAME in two clients can have entirely different USR01 rows, and assuming settings carried over from a client copy without checking is a common source of confusion.

Whose problem this is

This is Basis or security team territory. Any question about a user's format defaults, start menu, or logon language should be resolved through SU01 by the team that administers user masters, not by a functional consultant querying or editing the table directly. Functional teams should report the symptom and let security confirm it against the current SU01 settings.

Related SAP objects

Reviewed pages this object connects to in the ERPClimb knowledge graph.

Source: ERPClimb — https://erpclimb.com/sap-tables/usr01ERPClimb is an independent platform and is not affiliated with SAP SE. Reference pages are written and reviewed by SAP consultants for learning and troubleshooting.