User groups: Restrict user and role administration User groups: more control over who can create, change and assign roles to which users in a particular SAP system.