This website is not affiliated with, sponsored by, or approved by SAP AG.

Administrator Role

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Administrator Role

Postby Zarach » Tue Jun 19, 2012 2:38 am

Hi all. in my company i have been told to toggle profile SAP_ALL from all users except DDIC. we have only another one user with this SAP_ALL access, and this user is used for admin the system.
what standard roles should i grant to this user to continue being administrator and doing all the task needed without having SAP_ALL access?
also we have to create another user with all the permissions in the FI/CO modules. is there in this case a role, profile or a group of them in the standard ones?

thanks in advance
Zarach
 
Posts: 9
Joined: Thu Jun 14, 2012 7:09 am

Re: Administrator Role

Postby Gary Morris » Thu Aug 02, 2012 11:50 am

Copy SAP_ALL (by importing profile) in a new role and take out the auth objects most concerned about such as security. Auditors look for users with profile SAP_ALL and they wont find anyone.
Gary Morris
SAP Security Consultant
garydavidmorris@gmail.com
Gary Morris
 
Posts: 399
Joined: Sun Oct 20, 2002 10:42 pm
Location: San Antonio, Texas


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 3 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.