Troubleshoot and Solve SAP security Problems

New Onapsis service helps uncover SAP security issues

Security firm Onapsis released its Business Risk Illustration, which helps companies assess and deal with SAP security vulnerabilities, such as the 10KBLAZE exploit. Continue Reading

SAP security risks need more attention, but patching is a challenge

SAP organizations are more vulnerable than ever, as hackers are increasingly targeting ERP systems. Experts warn SAP customers to implement security patches early and often. Continue Reading

How can effective SAP License Management lead to costs savings?

SAP licenses can be a huge expense, but there are ways for enterprises to reduce licensing costs and ensure a better ROI on SAP investments. Continue Reading

Granting user access to cost centers through SAP authorization objects

A SearchSAP.com reader wants to know how to grant a user access to cost centers, as well as access to one cost element across all cost centers. Continue Reading

How to stop SAP users from displaying SAP HR tables content

Learn how to stop SAP users from displaying HR table contents in an SAP table without restricting access to an SE16N transaction. Continue Reading

Locating user email addresses in SAP SU01 transaction code

A SearchSAP.com reader who stores user email addresses within the SAP SU01 transaction code and wants to know where to locate the data.Continue Reading

How to map multiple SAP roles and profiles

Discover tips for mapping SAP roles and profiles, including how to map multiple SAP profiles to a single derived role, and why a second profile is generated when a large role has too many authorizations for one profile.Continue Reading

Viewing SAP transaction codes and profiles

An administrator is looking for a way to see what profiles belong to a particular T-Code.Continue Reading

Managing SAP user access and password expirations

An administrator user wants to know where to set SAP user login passwords and set time limits on sessions and password expiration dates.Continue Reading

Authorization objects with a value of single/double quote marks

I have some authorization objects that literally have single or double quotation marks as their values. I see these values associated with objects such as S_BTCH_NAM. What do these values allow or permit as part of this authorization object?Continue Reading

Easier maintenance of output types, procedures, conditions, etc.

To shorten the time it takes to maintain output types, procedures, conditions, etc., add NACE to your shortcuts.Continue Reading

Error claims ship to party is not defined

An SAP user did everything right, but an error message is saying otherwise. Krishna Kumar weighs in with some possible reasons for the problem.Continue Reading

Accessing the SE38 T code with only display authorization

Can you create a profile that has only display authorization for the SE38 T code? Expert Corwin Slack answers.Continue Reading

Listing TCODE transactions used to view what users are logged in to SAP

Does an authorization code exist to collect a list of all TCODEs and users logged in to SAP during a time period?Continue Reading

F_LFA1_APP and editing authorization restrictions

How does F_LFA1_APP work with editing authorizations? Expert Corwin Slack answers.Continue Reading

Blocking a material type in Transaction MM01

Adding an authorization group on a material type can prevent users from accessing that material type, says SAP security expert Corwin Slack.Continue Reading

Repeated deadline monitoring

Expert Alon Raskin teaches how to re-trigger deadline monitoring in SAP Workflow.Continue Reading

User exits for changing fields

Although greyed out items usually can't be changed in sales orders, it is possible to manipulate user exits that can enable you to change certain fields.Continue Reading

How to set parameter values in SAP

The locations where SAP-related parameters can be set -- the start profile, instance profile and the default profile -- and a description of how they work.Continue Reading

Blocking standard transactions in SAP

Expert Farooq Ali provides directions for blocking standard SAP transactions and the repercussions associated with this task.Continue Reading

How do I fix user role problems in SAP security?

Having too many roles in SAP security can indicate that something is wrong with your security infrastructure.Continue Reading

Reset the password of a user in some or all clients

Learn how to use transaction SU01in Central User Administration for resetting passwords for a user in multiple clients.Continue Reading

SAP NetWeaver 2004s kernel updates explained -- Part II

In the final part of a two-part series, SDN contributer Storm Archer III walks through processes for advanced kernel updates for scenarios like Java and Unix.Continue Reading

How to create transaction variants in SAP to hide information

Transaction Variants hide unwanted screens and fields in standard SAP programs. Learn two techniques to create them here.Continue Reading

How to lock specific users out of certain transactions

Not every user needs access to every transaction. Find out how to block certain users from specific transactions.Continue Reading

Errors with TP configuration

Check out this code too view a typical TP configuration error and read our expert's remedy.Continue Reading

How to handle errors during a transport with change documents release

Our expert solves transport release problems by removing or unlocking erroneous objects.Continue Reading

SAP security audit log setup

In this tip our upgrade/migration expert, Bert Vanstechelman, provides unorthodox uses for the Security Audit Log. Learn how to install this tool and use it to report resources necessary for the companies next upgrade and weigh transaction efforts.Continue Reading

Failing an IDoc in a user-exit

Our expert supplies code to fail an IDoc in a user-exit.Continue Reading

How to restrict users by plant in transaction code IW32

How do I go about creating an authorization group?

How to create an authorization group employing custom tables and otherwise.Continue Reading

Display locked and unlocked SAP transactions

This tip offers a quick and easy way to display locked/unlocked transactions.Continue Reading

Run a program to find name changes in the user ID history

Security expert Corwin Slack describes how to find name changes in the history of a particular user ID.Continue Reading

Locate user parameters for your SAP system

Find out where to locate user parameters for your SAP system from administration expert Bert Vanstechelman.Continue Reading

Mass changing of user passwords in SAP

Looking for a way to do a mass changing of SAP passwords? Basis expert Giovanni Davila explains how.Continue Reading

Eliminating spam with SpamAssassin, DSPAM and ClamAV

James Turnbull explores the differences between three open source antispam tools and explains some best practices for using these products to secure your organization's e-mail and help stanch the flow of spam.Continue Reading

SAP authorizations

Learn SAP advice on authorizations and transaction codes from ITKnowledge Exchange.Continue Reading

Trouble with character format in Smart Forms

Non-expiring password

If you want, you can make it so some users don't have to change their password by following these steps.Continue Reading

Downloading a file from the application server to the presentation server

ALV Grid dumps- running online and in background

I have a report in ALV Grid that is run online and in background. But when I schedule a background job, it dumps. The error says CNTL_ERROR. Any clues on how to solve this? Or should we not use ALV Grid for background jobs?Continue Reading

Capturing details from the BOM

We are in the process of writing an interface program to pass the details of configured materials (one or more levels of BOM) to create a Production Order. We have considered a number of ways to achieve the BOM explosion - either by using the ...Continue Reading

Restrict users to the transaction FBRA by document type

The next step for an experienced SAP Security consultant

Restricting use of certain passwords

Some words, such as company name, are unsuitable as passwords. Here's how to make sure they are not used.Continue Reading

How to recover a user-lost GUI session

Sometimes a user loses a session, either because his/her PC froze, lost power, sometimes even timed-out.Continue Reading

Synchronize your SAP account passwords

This program will copy the password for a nominated user account.Continue Reading

Parameters for establishing SAP password policies

Here are some tips on how to provide a SAP user ID and password to an SAP system.Continue Reading

Service contract technical objects

This tip tells you where the technical objects for a Service Contract (or sales order) are stored.Continue Reading

Can I modify a user exit without the right access key?

I have been told to modify the user exit "USEREXIT_SAVE_DOCUMENT_PREPARE"( MV50AFZ1), I don't have a access key for this. How can I include my program into this exit?Continue Reading

Creating a non-case sensitive search help exit

Program locked by ......... user

Sometimes when we loose connection with SAP and later connects again, we will get an error message.Continue Reading

Call transaction while bypassing auth check

Using the function module RS_HDSYS_CALL_TC_VARIANT, you can call a transaction to which the user doesn't have access.Continue Reading

Pulling reports with cost center and position/vacancy data

Better performance for selects

Better performance for selectsContinue Reading

TCodes and VLookup

Using agr_tstc and agr_tcodes tables you can run a list of all your Activity Groups, TCodes and TCode descriptions.Continue Reading

Assigning tcode to a profile

Is there a method to assign a tcode to a profile without adding the tcode to the Menus? Is this a matter of assigning the tcode directly to a user? This is a customer created tcode.Continue Reading

Common SAP security practices

Is there any common practice for setting up a group to handle SAP security? What sorts of separation of responsibilities do auditors usually ask for? Also, what profiles do Basis administrators usually have? SAP-ALL, or a profile with fewer ...Continue Reading