Re: SAP_XI_APPL_SERV_USER unable to customize
Hi, Please try this. 1. Go to the UME and check what UME roles are assigned to SAP_XI_APPL_SERV_USER.2. Mapped those UME roles you get in step 1 to the newly created custom role Z_PI_ APPL_SERV_USER....
View ArticleCRM_ORD_OE - org numbers in fields
We're maintaining specific sales org id's in auth object CRM_ORD_OE. We have different org unit numbers maintained in Dev system to those in Prod system. How do others go about maintaining specific...
View ArticleRe: Kerberos for SAP GUI Authentication -- Single Sign-On with Microsoft...
Hi Tim, Thanks for the information.. currently we are heavily invested in IBM Identity, federated identity and Access Management suites, based on our current infrastructure, it supports all kinds of...
View ArticleRe: Kerberos for SAP GUI Authentication -- Single Sign-On with Microsoft...
Patrick, Thanks for the link, it will help a lot.. I am going to test this integration soon. regardsAnjani
View ArticleRe: Kerberos for SAP GUI Authentication -- Single Sign-On with Microsoft...
Yes, there are companies that offer GSS API v2 SAP certified third party products 'just for Kerberos'. You can find details by searching on SAP Store (http://store.sap.com). Also, I need to let you now...
View ArticleClik here to view.
SNC unable to initialize
I believe I have configured SNC correctly.So when I enabled SNC and trying to login I am getting the following error But once i remove the SNC connection options in the network tab, I am able to...
View ArticleRe: SNC unable to initialize
Hi, Can you please check if you have logon on to PC using a domain user or not?Also please see note 352295 for more information.
View ArticleClik here to view.
Re: SNC unable to initialize
Yes I am logged an as Domain User, but now when I try to connect directly from the server SAP GUI (7.2) I am getting this error.
View ArticleFirewall in SAP landscape
Hello Folks, I try to understand the risks, if we don't have a firewall between application and database server? End users will never access database server as per the plan.Also do you recommend...
View ArticleRe: Firewall in SAP landscape
The only sensible segments are DMZ <-> corporate client networks <-> protected infrastructure network. More than that is just to be stuborn and not more secure... ;-) Even in these core...
View ArticleRe: SNC unable to initialize
Then, have you maintained the snc name of this user in tab page SNC via SU01?
View ArticleCopy Role in SAP
I want a way to copy one role to 60 diffrent rolesand each of these craeted new roles i want to change one authorization object with a diffrent values for example the Orignal role Z:original and the...
View ArticleRe: CHARM functionality for SAP role management
Thanks Laxman, For giving an option which we can study and than implement. Though, we cannot completely remove the approval process as it will be against an ITIL process. The actual problem which we...
View ArticleRe: Copy Role in SAP
Hi Mohd, The Best & fast way to achieve this is SECATT Script. 1.in the tcode recording Copy the role from Z original role and at authorization tab maintain the value in authorization object....
View ArticleRe: XD02 - Restrict Access to Global Data
Hi, Usually the account group auth is deemed sufficient, from your requirements I assume that you are already using F_KNA1_GRP and then need further granularity hence the problem with GEN. It sounds to...
View ArticleRe: CHARM functionality for SAP role management
Hi Sameer, I think the simplified solution is very much a process/organisational one. Streamline as much as you can from a process perspective and then as Laxman said, create the minimum workflow...
View ArticleRe: Firewall in SAP landscape
Thanks Julius. Regarding your comments on port, I would like to clarify bit.Do you suggest to close the ports other than critical connections such as TMS/RFC/Printer/DB listener etc.? We don't have any...
View ArticleRe: Firewall in SAP landscape
If you are not using something then it is better to deactivate it or leave it inactive in front end component application gateways. The trick is to limit the attack surface at the network port level...
View ArticleRe: Copy Role in SAP
Hi Kiran, As far as I remember (i did test quite a long time ago) CATT cannot manage popups, and changing an authorization field is done through a popup, so I'm afraid it cannot be used there.This...
View ArticleRe: Copy Role in SAP
Hello So you've got two actions to complete1) copy a role2) mass update authorization object in the created role A first solution would be to download the source role and copy the generated text...
View Article