This website is not affiliated with, sponsored by, or approved by SAP AG.

Profiles for superuser?

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Profiles for superuser?

Postby ak4sap » Tue Oct 22, 2002 10:39 am

Hi all,
How can u look for profiles for sap*?
How can we make a user, a SUPERUSER?
Is sap* considered a superuser?

Thanks
AK
ak4sap
 

Re: Profiles for superuser?

Postby sri_vandan » Tue Oct 22, 2002 12:10 pm

Search OSS for detailed info on SAP*. However, if you want to make a user SUPER USER, you need to assign the user SAP_ALL and SAP_NEW profiles in SU01 transaction.

Usually SAP* is hardcoded in SAP Programs and yes, SAP* is a super user. You can disable SAP* account by setting a profile parameter.


ak4sap wrote:Hi all,
How can u look for profiles for sap*?
How can we make a user, a SUPERUSER?
Is sap* considered a superuser?

Thanks
AK
sri_vandan
 

Postby John A. Jarboe » Tue Oct 22, 2002 6:19 pm

SAP* is only hard coded from the standpoint of what it cannot do, not what it can in the higher versions of SAP. SAP* , as long as it is defined in SU01, is a superuser ONLY if the ID has SAP_ALL attached, if any other access is granted it can only do what it is allowed to by the roles attached. It has no Special Access unless you delete it in SU01.

Any user can be a SUPER USER by assigning SAP_ALL, in higher versions of SAP SAP_NEW is not needed as SAP_ALL is generated using RSUSR4xx programs or in SU21.
John A. Jarboe
 


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 4 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.