Problem solve
Get help with specific problems with your technologies, process and projects.
SAP security
New Onapsis service helps uncover SAP security issues
Security firm Onapsis released its Business Risk Illustration, which helps companies assess and deal with SAP security vulnerabilities, such as the 10KBLAZE exploit. Continue Reading
SAP security risks need more attention, but patching is a challenge
SAP organizations are more vulnerable than ever, as hackers are increasingly targeting ERP systems. Experts warn SAP customers to implement security patches early and often. Continue Reading
How can effective SAP License Management lead to costs savings?
SAP licenses can be a huge expense, but there are ways for enterprises to reduce licensing costs and ensure a better ROI on SAP investments. Continue Reading
-
Granting user access to cost centers through SAP authorization objects
A SearchSAP.com reader wants to know how to grant a user access to cost centers, as well as access to one cost element across all cost centers. Continue Reading
How to stop SAP users from displaying SAP HR tables content
Learn how to stop SAP users from displaying HR table contents in an SAP table without restricting access to an SE16N transaction. Continue Reading
Locating user email addresses in SAP SU01 transaction code
A SearchSAP.com reader who stores user email addresses within the SAP SU01 transaction code and wants to know where to locate the data.Continue Reading
How to map multiple SAP roles and profiles
Discover tips for mapping SAP roles and profiles, including how to map multiple SAP profiles to a single derived role, and why a second profile is generated when a large role has too many authorizations for one profile.Continue Reading
Viewing SAP transaction codes and profiles
An administrator is looking for a way to see what profiles belong to a particular T-Code.Continue Reading
Managing SAP user access and password expirations
An administrator user wants to know where to set SAP user login passwords and set time limits on sessions and password expiration dates.Continue Reading
Can SAP developer include authority check for S_TCODE in a called transaction?
An administrator wants to know if there is a way to run an authority check in a transaction code without having to add it in in S_TCODE.Continue Reading
-
Job prospects in SAP security
Job prospects in SAP securityContinue Reading
SAP administration information for a Basis interview
Where can I find information about SAP administration? I have a Basis interview soon.Continue Reading
Restricting sales document assignments by sales area
In PFCG I have created a single role to manage the services order by plant. In the transaction IW32 I would like to restrict the sales document assignment by sales area. Which authorization object can do that? Can I define my single role without a ...Continue Reading
Authorization objects with a value of single/double quote marks
I have some authorization objects that literally have single or double quotation marks as their values. I see these values associated with objects such as S_BTCH_NAM. What do these values allow or permit as part of this authorization object?Continue Reading
Error logging in using a reference ID
I am creating an ID in SU01. In the "logondata" tab I marked the user type as "Reference," but when I try to log into SAP it prompts me to log on with a dialog user. How can I enter without this prompt?Continue Reading
Security risk: Users able to see data from other companies
We are using SAP 4.6c on a single instance. We have one controlling area with multiple companies. We have a problem where a user in one company can have access to the data of other companies. This problem presents itself in FI, CO and MM. We want to...Continue Reading
Easier maintenance of output types, procedures, conditions, etc.
To shorten the time it takes to maintain output types, procedures, conditions, etc., add NACE to your shortcuts.Continue Reading
Assigning roles to all users in a group
How do I assign roles to a specific group, not to a specific user, and apply the roles to all users in that group? This particular group has four users.Continue Reading
Unlocking a blocked admin user ID in an Oracle DB
My admin user ID has been locked out. Is there a table I can update in Oracle to reset the flag and enable myself to login?Continue Reading
Error claims ship to party is not defined
An SAP user did everything right, but an error message is saying otherwise. Krishna Kumar weighs in with some possible reasons for the problem.Continue Reading
What is the process for resetting a DDIC password?
Is the process for resetting a DDIC password in SAP unusual in any way? Corwin Slack clarifies the matter.Continue Reading
Accessing the SE38 T code with only display authorization
Can you create a profile that has only display authorization for the SE38 T code? Expert Corwin Slack answers.Continue Reading
Listing TCODE transactions used to view what users are logged in to SAP
Does an authorization code exist to collect a list of all TCODEs and users logged in to SAP during a time period?Continue Reading
F_LFA1_APP and editing authorization restrictions
How does F_LFA1_APP work with editing authorizations? Expert Corwin Slack answers.Continue Reading
Blocking a material type in Transaction MM01
Adding an authorization group on a material type can prevent users from accessing that material type, says SAP security expert Corwin Slack.Continue Reading
How do I restrict transaction access based on user profile?
Researching what users need to do in their job duties may be the best way to set appropriate security permissions, says expert Corwin Slack.Continue Reading
Repeated deadline monitoring
Expert Alon Raskin teaches how to re-trigger deadline monitoring in SAP Workflow.Continue Reading
User exits for changing fields
Although greyed out items usually can't be changed in sales orders, it is possible to manipulate user exits that can enable you to change certain fields.Continue Reading
How to set parameter values in SAP
The locations where SAP-related parameters can be set -- the start profile, instance profile and the default profile -- and a description of how they work.Continue Reading
Blocking standard transactions in SAP
Expert Farooq Ali provides directions for blocking standard SAP transactions and the repercussions associated with this task.Continue Reading
How do I fix user role problems in SAP security?
Having too many roles in SAP security can indicate that something is wrong with your security infrastructure.Continue Reading
Security buying in five easy steps
Choosing a security product or service is not rocket science. But you can save money, reduce stress and have VARS competing for you if you follow these simple steps.Continue Reading
Reset the password of a user in some or all clients
Learn how to use transaction SU01in Central User Administration for resetting passwords for a user in multiple clients.Continue Reading
SAP NetWeaver 2004s kernel updates explained -- Part II
In the final part of a two-part series, SDN contributer Storm Archer III walks through processes for advanced kernel updates for scenarios like Java and Unix.Continue Reading
SAP NetWeaver 2004s kernel updates explained -- Part I
Learn what SAP kernels do for your SAP systems, where to get them and what factors to consider when applying one in this tip by SDN contributing member Storm Archer III.Continue Reading
Using Oracle passwords with SAP
As our expert explains, using Oracle passwords to connect to SAP is not efficient. He suggests proper password etiquette.Continue Reading
How to create transaction variants in SAP to hide information
Transaction Variants hide unwanted screens and fields in standard SAP programs. Learn two techniques to create them here.Continue Reading
Cost element authorizations (account posting) in SAP
Security abounds and controlling account posting is one of the checks and balances administrators can impose on users. Be careful though, the practice is highly discouraged.Continue Reading
Security forecast based on SAP GRC
WIth the advent of SAP GRC (Governance, Risk and Compliance,) jobs could be threatened due to automated processes. Our expert predicts security jobs will not only flourish, but also have potential to expand with this new software.Continue Reading
Code for dynamically switchable parameters
Parameters for immediate change effects after an authorization error.Continue Reading
How to lock specific users out of certain transactions
Not every user needs access to every transaction. Find out how to block certain users from specific transactions.Continue Reading
Authorizations and SPRO-like screens for table maintenance
Learn how to call table maintenance for Z tables and apply company code authorizations.Continue Reading
Assigning user roles
An administrator is curious if any transactions -- besides PFCG and SUO1 -- can be utilized to assign user roles.Continue Reading
How to I apply patches to Central User Administration (CUA)?
Procedures for applying spam patches, kernel patches and GUI patches on CUA.Continue Reading
Retrieving logon instances in SAP systems
Our expert provides steps to retrieving the date and time of a user's last log on to SAP systems.Continue Reading
Permitting user access to exclusive tables within a transaction
With privacy and security efforts increased, administrators are looking to permit access only to certain tables within a transaction.Continue Reading
Custom messaging with CCMS
Is it possible to generate custom messages within CCMS?Continue Reading
Errors with TP configuration
Check out this code too view a typical TP configuration error and read our expert's remedy.Continue Reading
Troubleshooting transports
Using the Transport Management System to troubleshoot transports that are not moving.Continue Reading
How to handle errors during a transport with change documents release
Our expert solves transport release problems by removing or unlocking erroneous objects.Continue Reading
SAP security audit log setup
In this tip our upgrade/migration expert, Bert Vanstechelman, provides unorthodox uses for the Security Audit Log. Learn how to install this tool and use it to report resources necessary for the companies next upgrade and weigh transaction efforts.Continue Reading
Failing an IDoc in a user-exit
Our expert supplies code to fail an IDoc in a user-exit.Continue Reading
How to restrict users by plant in transaction code IW32
What are the pros/cons of using SAP delivered roles?
Restricting change access to transaction CO02 without using a core mod
How do I go about creating an authorization group?
How to create an authorization group employing custom tables and otherwise.Continue Reading
What are good SAP security for CRM resources?
I am searching for information regarding SAP security for CRM. Are there any resources which covers this subject? Can you offer any tips as to where I can get started and begin to understand how security operates within CRM?Continue Reading
Display locked and unlocked SAP transactions
This tip offers a quick and easy way to display locked/unlocked transactions.Continue Reading
If a user has an authorization for a transaction, will he absolutely be able to start it?
Read security expert Corwin Slack's advice for one reader who is concerned about the authorizations for a particular user ID.Continue Reading
Is there one conclusive report that lists all authorizations for one user ID?
Learn how to generate a report listing the transactions accessible to a certain SAP user ID in this expert tip.Continue Reading
What are the industry standards for SAP authentication?
Corwin Slack, security expert on SearchSAP.com, provides a rundown of the industry standards for SAP authentications.Continue Reading
Run a program to find name changes in the user ID history
Security expert Corwin Slack describes how to find name changes in the history of a particular user ID.Continue Reading
Locate user parameters for your SAP system
Find out where to locate user parameters for your SAP system from administration expert Bert Vanstechelman.Continue Reading
Mass changing of user passwords in SAP
Looking for a way to do a mass changing of SAP passwords? Basis expert Giovanni Davila explains how.Continue Reading
Eliminating spam with SpamAssassin, DSPAM and ClamAV
James Turnbull explores the differences between three open source antispam tools and explains some best practices for using these products to secure your organization's e-mail and help stanch the flow of spam.Continue Reading
What is the best way to encrypt messages?
Want to encrypt a particular message? SAP expert Axel Angeli explains how.Continue Reading
How to use a created lock object
Use the ENQUEUE to lock the object (check the return codes to see if the lock acquisition failed -- this means the object is already locked). Use DEQUEUE to unlock the object.Continue Reading
SAP authorizations
Learn SAP advice on authorizations and transaction codes from ITKnowledge Exchange.Continue Reading
Chance of working in security after a two-year absence
I have been an SAP professional since 1994, when I was trained in ABAP and General Ledger applications for a major U.S. Airline conversion project. Since that time I have continued using my ABAP skills, but have turned more attention to the ...Continue Reading
How to initialize the value within a session
I am coding in USEREXIT_MOVE_FIELD_TO_VBAP of program MV45AFZZ, and my local variable gets initialized every time it comes in for next item. I need to keep retaining the last value generated from the previous item.Continue Reading
Trouble with character format in Smart Forms
Executing the availability check
Disaster recovery
The best way to recover SAP/Oracle/WYK if you had to loose your entire system in a speedy time.Continue Reading
Non-expiring password
If you want, you can make it so some users don't have to change their password by following these steps.Continue Reading
Downloading a file from the application server to the presentation server
Restricting financial view
ALV Grid dumps- running online and in background
I have a report in ALV Grid that is run online and in background. But when I schedule a background job, it dumps. The error says CNTL_ERROR. Any clues on how to solve this? Or should we not use ALV Grid for background jobs?Continue Reading
SAP authorization and security classes
Establishing security parameters
If you need to increase the security in SAP, you have to set the following parameter in transaction RZ10.Continue Reading
Assigning limited password reset-authority
I need to delegate the resetting of password to an individual but don't want this individual to have any rights on SU01 but to unlock user and reset password. Is there a way to do this? I'm on release 4.6C.Continue Reading
SAP security vs. others
Vendors access to production data
Access to SE16 in production
If you must give direct access to tables in production, heed this advice.Continue Reading
SAP Security Analysts salary
Tracking modification/deletion of a user
Want to know who deleted or modified a user?Continue Reading
Spylog for user actions
Under some circumstances we need to find out who has done what in R/3 system over a period of time.Continue Reading
Capturing details from the BOM
We are in the process of writing an interface program to pass the details of configured materials (one or more levels of BOM) to create a Production Order. We have considered a number of ways to achieve the BOM explosion - either by using the ...Continue Reading
Viewing historical user ID information
Restrict users to the transaction FBRA by document type
SAP Security course for R/3 4.6C
"Roles and Responsibilities" for security administration
Do you have a good "Roles and Responsibilities" write-up for security administration in a SAP shop? Where is the line between a centralized security administrator and a user area administrator?Continue Reading
Can I park incoming invoices when no goods entry is posted?
I am working with INVOIC01 in 4.6C using INVL as the process code. The problem I am having is that I want to post or park an invoice when goods receipt has not been posted. It seems that SAP rejects such invoices by default. Unfortunately, the ...Continue Reading
The next step for an experienced SAP Security consultant
Implementing structural authorizations
Can accounting postings be restricted by organizational objects?
Can financial accounting postings be restricted by CO organizational objects? In other words, can I restrict postings using transaction code F-02 to a specific profit center? What authorization object and activity has to be set up/modified for this ...Continue Reading
Purchase request authorization with specifically coded user exits
Pros and cons of structural authorizations
Defaulting to blank user parameters
Regulating user authorizations for Goods Receipting transactions
Security levels for dialog users