Quantcast
Channel: SCN: Message List - Security
Viewing all articles
Browse latest Browse all 5338

Re: Sm36 - restrict user to only delete theirs own jobs

$
0
0

Hi Kalpana

 

Within SM36 when you define the job step there is a field for the User which it's executed under. Same applies under SM37 when you go to the steps for the job. You can edit and switch user to someone else

 

S_BTCH_NAM must be restricted (in most cases not assigned) any any accounts granted in this permission should be limited to the intended purpose of the user. That is, don't create a BATCH_USER with SAP_ALL unless you have centralised all batch processing to manage the risk of the access. If not, you have a risk whereby a user could schedule to run a job under the permissions of a system user for access they would not usually have.

 

S_BTCH_ADM not needed either (and there are more values than just Y now)

 

If you read the documentation on these objects you will get information to assist. Don't trust the system traces as failed checks are okay for some of these scenarios.

 

Regards

Colleen


Viewing all articles
Browse latest Browse all 5338

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>