Quantcast
Channel: SCN: Message List - Security
Viewing all 5338 articles
Browse latest View live

Re: create single role copy of composite role in sap security

$
0
0

Hi

 

Inserting profiles (I think) makes the new role a bit of a mess. The profile inserts the objects in a 'manually' state so that the object no longer references any of the transactions it was supporting in the original role. I'm assuming the original role did this.

 

By the time you mess around with the values you might as well have just created a new single role, corrected SU24 as required and be done with the whole thing.

 

Plus - this topic is covered many times if tried to use the search...

 

Kind regards

David


Re: Quick question about SAP Security analyst responsibilities

$
0
0

Hi Alex

 

I have no other experience in SAP other than MM, WM and a little PM. I moved into security purely to support a UK Gas company during a rollout in 1999.

 

I openly admit to not having any proper portal etc expertise but I still consider myself to be a half-decent SAP security contractor in the ECC environment.

 

I have no certificates from SAP (unless you count a procurement one ) but I think I can generally get by in my daily tasks.

 

Most important thing is (IMO) - working in your team and sharing/working together to understand issue and resolve them.

 

If you have good selection of people in the team then you are 'cooking' techie, programmer, portals, business knowledge, security

 

Maybe I'll pick up the new stuff as I bimbles along but I tend to forget the old stuff as the new stuff takes its place. Used to remember where I lived once I think...

 

Best wishes

David

Re: Quick question about SAP Security analyst responsibilities

$
0
0

Hi DB,

 

That may be a good personal strategy to position yourself in a contract or even globally as a subject matter expert. If you are deep enough into the end-to-end MM, WM and PM implementations then you will know enough about FI etc to avoid TAX problems, consignment stock holding always involves some sort of infrastructure topics and you can hardly implement anything now-a-days without the SD side wanting to come through from mobile devices to verify stock levels or delivery schedules. You will be fine in the exam.

 

If you are involved, knowledgeable and experienced enough in all aspects of MM, WM, PM security then you will really be fine to pass the exam, even if you have to take a few guesses on the name of the table for HR Org. Management integration... or take a blind guess that GRC is going to lower your ROI instead of waste your time regardless how you use it... etc...


However if your employer or contracting agency or ego forced you into a little box then it might be tough to have enough breadth and depth of knowledge or experience to pass the professional exam, but that was the same in the old exam as well.

 

If only interested in GRC and some PFCG things, then stick to the Associate exam. If you are deeper into the topics, including upgrades, integration, authentication options, some Java options, selected coding aspects... then go for the professional exam.

 

Personally I recommend just getting on with your life strategy if that makes sense for you...  Don't let SAP exams get you down if they are easy... ;-)

 

Cheers,

Julius

Re: Security Audit Log is not active (0170)

$
0
0

Hi Pavan,

In URL that you propose I can't find filters that i can configure .

Please explain why filter is not properly configured?

 

BR

Re: SAP ECC EHP 4 to EHP 7 Upgrade

Re: CHARM functionality for SAP role management

Re: sap menu accounting missing

$
0
0

Hi all,,

are you able to find any solution for this. we are facing the same problem that in HR some sub modules are visible some are not.

like personnel development is visible.

and like recruitment is not visible.

 

Please help.

 

Thanks

Re: Security Audit Log is not active (0170)

$
0
0

Hi Mikhail

 

Click on edit button and click reset button...

 

1.png

 

 

then you can see the below

2.png

 

Cheers

Pavan m


BMCC SU24 change issues

$
0
0

Hi,

 

BMCC transaction codes has plant field in the selection screen.

However it does not perform plant level check.

Inorder for the tcode to perform the plant level check i had marked the the object M_MATE_WRK as check/maintain in SU24 and saved it.

After performing this change the plant field disappeared form  the selection screen when i run BMCC tcode.

I reverted the changes in SU24 but still not able to see the plant field.

Kindly suggest the solution for this.

 

BMCC before SU24 change

BMCC_before SU24 change.jpg

BMCC after SU24 change and after reverting the SU24 change: No Plant field:

BMCC_after SU24 change and after reverting  the su24 change.jpg

Re: BMCC SU24 change issues

$
0
0

This is very evil timing...

 

The selection screen is programmed to dynamically hide the field depending on availability of a batch. Your SU24 is not influencing the screen - the data it could possibly select and do a check on is and currently there is nothing to check.

 

Lucky you, for the moment...

 

Cheers,

Julius

Re: SAP ECC EHP 4 to EHP 7 Upgrade

$
0
0

Hi,

 

the first thing that comes to mind is that you will have to update your roles. There are many new authorization objects and checks in ECC 6.0 comparing to 4.7. So you will have to amend your roles accordingly using standard transaction SU25. The will be probably the biggest task and you can't avoid it. 

 

The newer version provides some additional methods for securing SAP system (e.g. securing RFC connections). The easiest way is to go through SAP security guide mentioned by Andrea. There is also a separate document about hardening ABAP AS. That's a good document as well.

 

Cheers

Re: BMCC SU24 change issues

$
0
0

Thanks a ton.. Thats absolutely correct

Re: SU25 UPG ENHP : how to find modified roles?

$
0
0

Hi Sunny/Colleen,

 

Although its quite late to reply on this old thread, but since I am facing the same issue I would like to know more about how you resolved it.

 

I am working on an upgrade project from ECC6 EHP4 yo ECC6 EHP 6. I have executed SU25 2A and 2 B till date. But to my surprise I see all the Z tcodes listed in SU25 2B. Isn't this strange? This is the same issue which you have mentioned in this thread.

 

Also I get a similar detailed report in 2A step, while in my past project we never received any outputs in 2A. Also this report shows few tcodes where the customization was done in the previous release i.e EHP4 but in EHP 6 there was no update done. Ideally I should see these kid of tcodes in SU25 2B where I should see my customization done in the previous version and I have an option to keep it or overwrite it with the SAP default. Is my understanding correct?

 

I hope that the logic of 2A and 2B steps are not changed in EHP6. Let me know your experience on this.

Re: SU25 UPG ENHP : how to find modified roles?

$
0
0


Also did you run : SU24_AUTO_REPAIR before upgrade as suggested by other experts in different threads.

SAP Security - create 2 completely separate companies on 1 instance

$
0
0

I am consulting with a privately held company and they want to spin off part of the business to create a public company.  Will we need to set up a separate client to house the public company data/processing  or is there any way at all to secure each company in SAP so they cannot see the other companies data?  To complicate this, they want to share master data.  I've been researching and cannot find a way to secure the data so that I am positive there is a 'brick wall' between the 2 entities.  Any help/directions/suggestions are greatly appreciated.  THANKS!


Re: SAP Security - create 2 completely separate companies on 1 instance

$
0
0

There is a org level authorization object BUKRS which control the company code access.

Re: SAP Security - create 2 completely separate companies on 1 instance

$
0
0

I am under the impression BUKRS is enough to completely separate the 2 entities to guarantee the data will not somehow be shared. (or some prying users does not see data they should not) I should also add that the security design is the 'enabler'  roles so a bit more complicated.  This new set up will need to pass outside audits by stock exchange.......

Re: SAP Security - create 2 completely separate companies on 1 instance

$
0
0

There is no doubt in my mind that enabler roles and expecting $BUKRS to keep the two entities with common master data etc apart is going to backfire on you beyond all imaginable boundaries...

 

Cheers,

Julius

Re: SU25 UPG ENHP : how to find modified roles?

$
0
0

Hello,

 

1. I have not began with SU25 activities for the DEV tier as of now.

2. Just to repeat, raise OSS message with SAP and let them confirm what's wrong, if any.

3. Just confirm SU24 changes made to the standard SAP tcodes in old release are in sync across your landscape (i.e. DEV, QA,PRD).

 

Thanks,

Sunny Doshi

Re: SAP Security - create 2 completely separate companies on 1 instance

$
0
0

meant to say that BUKRS is NOT enough

Viewing all 5338 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>