SAP BASIS AND SECURITY TUTORIAL

 SAP HANA Administration Questions And Answers 1. What is SAP HANA? SAP HANA (High-Performance Analytic Appliance) is a modern, in memory-database and platform that is deployable on premise or in the cloud. The SAP HANA platform allows you to analyze large volume of data in real time. SAP HANA platform allows you to store and access data in-memory and column based by using the database services. SAP HANA allows both online transaction processing (OLTP) and online analytical processing (OLAP) on one system. SAP HANA allows to develop applications, run your custom applications built on SAP HANA, and manage their lifecycles by using application services. 2. What are the user types required in SAP HANA Database? Users: These are regular users who uses SAP HANA database regularly. These users are created by the system administrators. SYSTEM User: These are the user where they will be having system administrator access. Technical user: SYS, _SYS_STATISTICS and _SYS_REPO. These are intern...

What is SAP Security and Why it is important SAP software is used by many organizations as their business application, so the data pertaining to SAP should be protected from unauthorized access within the organization and outside of the organization. The system should be monitored and protected. SAP Security is all about securing the code which includes securing custom code and SAP code. Server configuration, secure login, system communication, data security, authorizations and users security are essential to secure. At the same time it is required to maintain the system compliance by monitoring the system, performing timely audits, and creating emergency plans. SAP Security is important in protecting the systems from cyber threats. This way one can maintain the integrity, confidentiality and availability of the system. The most common use cases are data leak detection, periodic audits, central system monitoring, and finding unauthorized access. Any attack on the SAP system can cause a...

 SAP GRC Access Controls Questions and Answers 1. What is SAP GRC? Governance, Risk and Compliance id the full form of GRC. It provides a solution that enables organizations to maintain regulations and compliance and remove any risks in maintaining organizations key operations. 2. How many modules present in GRC? a. Access Control (AC) b. Process Control (PC) c. Risk Management (RM) d. Environment, Health and Safety (EHS) e. Global Trade Services (GTS) 3. What is the software of GRC Financial compliance? GRCFND_A 4. What is the plugin used for HR backend? GRCPIERP – Used for HR function 5. What is the plugin used for NHR backend? GRCPINW – Used for Non-HR functions 6. What is the periodic process that allows role owner to remove roles from the users? UAR Review 7. Where can you define a mitigating control? a. Mitigating controls workset in Access Control b. Access Control risk analysis result screen c. Central process hierarchy in process control 8. What is the process of  imp...

Role Administration Functions of the role administration is managing roles and managing authorization data. Transaction code PFCG (Profile Generator) is used for maintaining the roles, profiles and authorizations.  The roles are link between the user and authorizations. Basically the authorizations are stored in the system as objects. User menu is assigned to the users with the roles and it is displayed when the user logon the system. Roles contains transactions, reports and web based applications. With the role administration user can create roles and assign to users, change roles, delete roles, derive roles, compare roles and transport roles. In this blog i will be explaining about how to creating single roles in SAP using PFCG transaction code. Basic process of role administration: 1. Prepare a role matrix based on job description. Menu paths and transactions should be determined for each job position and determine the required authorizations like change, display, delete.  ...

 SAP BASIS: Administration and Monitoring Tools SAP System provides various tools for monitoring the system and for making administration changes. The tools can be accessed from SAP menu by selecting Administration-->System Administration, then under nodes Administration and Monitor. The monitoring tools can also be directly executed using the transaction codes. 1. Consistency Check SICK:   Transaction code SICK is executed immediately after the installation to get the information about any inconsistencies in the SAP installation process. It crosschecks the release numbers and character sets in SAP Kernel with the database release numbers. 2. SAP Application Server Overview SM51:   It displays all the application server instances of the SAP system. This transaction code is used to monitor application servers and change their states (Initial, Started, Active, Shutdown and Stop). 3. Monitoring ABAP Work processes SM50:   It displays the activity of work process...

 SAP BASIS Questions And Answers - Part 2 1. What is profile and what type of profiles are available in SAP R/3 system? Profile is an operating system files which contains parameters and configuration information of an instance. The profiles are stored in the directory /usr/sap/<SID>/SYS/profile. Profile maintenance can be done using RZ10 transaction code. There are 3 types of profiles available in the SAP system. a. Start Profile: It defines which R/3 services to start b. Default Profile: It acts as a common configuration of profile values for instances c. Instance Profile: It contains the parameter values specific to instance The parameter list can be viewed using the reports RSPARAM or RSPFPAR 2. What parameters are present in Default Profile? Default profile is an operating system level file that consists of parameters used by all application servers from the same SAP system. This profile is generated automatically by the system when it is first installed. Below are some ...

 SAP BASIS Questions And Answers - Part 1 1. What are the profiles available for client copy? SAP_ALL – This profile copies all client specific data w/o any change documents SAP_APPL – Customizing and application data without any change documents SAP_CUST – Customizing SAP_CUSX – Customizing w/o authorization profiles and roles SAP_PROF – Only authorization profiles and roles SAP_UCUS – Customizing and user master records SAP_USER – User master records and authorization profiles 2. After client copy, is tablespace and database sizes increase? Yes, the tablespace and database sizes will increase after client copy as the data is copied between the clients. 3. How to do transports between the systems? Transports can be done via STMS_IMPORT transaction code in application level. Transports can be done from operating system level using tp command. 4. Where the transport data files will be stored? Transport data files will be stored under /usr/sap/trans/data 5. What is transport domain? ...

  SAP Security Questions and Answers - Part 2 1. What is USOBT_C and USOBX_C USOBT_C and USOBX_C are two SAP customer tables which controls the behavior of the profile generator after the transaction has been selected. After new installations, these two tables are empty and must be filled with values before the profile generator is used for the first time. SAP delivers standard tables USOBT and USOBX. These tables are filled with default values and used for the initial fill of the customer tables USOBT_C and USOBX_C. The customer tables may be modified if required. T.code SU25 copies the SAP defaults from USOBT and USOBX to the customer tables USOBT_C and USOBX_C. T.code SU24 is used to take care of these customer tables to adjust the behavior of profile generator and authorization checks to be performed for every transaction code. 2. Authorization object status in Roles a. Standard: This object displays value entries in authorization fields which are  default, and also the ob...