SAP BASIS AND SECURITY TUTORIAL

What is SAP Security and Why it is important SAP software is used by many organizations as their business application, so the data pertaining to SAP should be protected from unauthorized access within the organization and outside of the organization. The system should be monitored and protected. SAP Security is all about securing the code which includes securing custom code and SAP code. Server configuration, secure login, system communication, data security, authorizations and users security are essential to secure. At the same time it is required to maintain the system compliance by monitoring the system, performing timely audits, and creating emergency plans. SAP Security is important in protecting the systems from cyber threats. This way one can maintain the integrity, confidentiality and availability of the system. The most common use cases are data leak detection, periodic audits, central system monitoring, and finding unauthorized access. Any attack on the SAP system can cause a...

Role Administration Functions of the role administration is managing roles and managing authorization data. Transaction code PFCG (Profile Generator) is used for maintaining the roles, profiles and authorizations.  The roles are link between the user and authorizations. Basically the authorizations are stored in the system as objects. User menu is assigned to the users with the roles and it is displayed when the user logon the system. Roles contains transactions, reports and web based applications. With the role administration user can create roles and assign to users, change roles, delete roles, derive roles, compare roles and transport roles. In this blog i will be explaining about how to creating single roles in SAP using PFCG transaction code. Basic process of role administration: 1. Prepare a role matrix based on job description. Menu paths and transactions should be determined for each job position and determine the required authorizations like change, display, delete.  ...

Creating  New User Account U sing Transaction Code SU01 SAP User Administration functions include User Creation, Change, Display, Delete, Copy, Lock/Unlock, Password reset. The topic is about creating new user account in SAP system. I have explained two methods. This is relevant for SAP Security Consultants or SAP User Administrators who want to perform user administration activities in SAP system. The User Administrator must follow the company policies and approval process before creating user account. Prerequisites for creating New User Account User Administrator/SAP Security Consultant should have the roles with the below authorizations in it. 1. Authorization Object S_USER_GRP for creating user and assign to user group. 2. Authorization Object S_USER_PRO for assigning authorization profiles to user. 3. Authorization Object S_USER_AUTH for creating and modifying authorizations. 4. Authorization Object S_USER_AGR for assigning roles to user. 5. Authorization Object S_USER_TCD for...