High flexibility for ad hoc growth
CG3Z Upload file
A role concept according to best practice protects you from potential attacks within your SAP landscape. However, to protect your system from unauthorized access via the network, a correct configuration of the SAP gateway is required. It enables the use of external programs via interfaces or the call of ABAP programs and serves as a technical component of the application server, which manages the communication of all RFC-based functions.
As an interface to the user, the presentation layer contains software components (the SAP GUI) by means of which the user is presented with the application. During its runtime, an SAP GUI component is always permanently linked to a user logon to the NetWeaver AS ABAP.
Migration of SAP systems to HANA DB
A secure SAP system does not only include a good role concept. It is also necessary to check whether a user should (still) have a specific role. Regular verification of role assignment is called recertification. In this blog post, I'd like to introduce you to the need for recertifications and our own tool, EasyReCert. The need for recertification - scenarios: Example 1: The "apprentice problem" Imagine the following scenario: A new employee (e.g. apprenticeship or trainee) will go through various departments as part of his or her training and will work on various projects. Of course, an SAP User will be made available to your employee right at the beginning, which is equipped with appropriate roles. As each project and department passes, the employee repeatedly needs new permissions to meet the requirements. After the employee has successfully completed his or her induction and is now in a permanent position, he or she still has permissions that are not necessary to perform his or her duties. This violates the principle of "last privilede" and represents a potential security risk for your company. Example 2: The change of department The change of department is one scenario that probably occurs in every company. If a change of department does not automatically involve a complete reallocation of roles and the employee simply takes his old permissions with him, critical combinations of permissions can occur very quickly. For example, an employee who has permissions in accounts payable and accounts receivable violates the SoD ("Segregation of Duties") principle and poses a potential security risk to your company. Recertification as part of a revision: The two examples above show that a regular review of role allocation identifies potential security risks for your business and can be addressed.
The Precalculation Server is a standalone application that allows you to generate and distribute Excel workbooks based on SAP BI data. Are you already using the Precalculation Server or would you like to take advantage of it in the future? I would be happy to explain the steps from installing the Precalculation Server to finally starting the instances on the target system so that you can use the Precalculation Server for your purposes. As a reader of our blog, you are certainly interested in tricks and tricks that will make your SAP system easier to handle. You may be familiar with the situation where you want to install a Precalculation Server yourself. Here you will learn how this task can be implemented in the SAP environment. Prerequisites For example, you need a Windows 7 or a Windows Server 2012 instance on which the Precalculation Server is installed to operate the Precalculation Server. Both 32 and 64-bit versions can be used. In addition, the machine requires a .NET installation to run the Precalculation Server in addition to a Microsoft Excel installation (32-bit version is essential). Download the installation files In advance, you should download the latest installation files from the official SAP website to the target computers. Cleanup Phase If you already have an existing installation on the system, the first thing you need to do is uninstall all items to use a clean host for the Precalculation Server. You can do this by calling the Windows Control Panel: The order must be followed according to the SAP documentation. Therefore, apply the following procedure for uninstallation, no installation of SAP should be visible anymore: Order: 1) SAP BW Precalculation Service 2) SAP Business Explorer 3) SAP GUI for Windows XY Note: During the installation and uninstallation of individual components, the progress bar status may be suspended at certain locations. This is not a cause for concern, but a normal behaviour. Often, it will stand at 92% or 95% for about 10 minutes.
"Shortcut for SAP Systems" makes it easier and quicker to complete a number of SAP basis tasks.
The relevant roles are listed below.
SAP Basis is the foundation of any SAP system. You can find a lot of useful information about it on this page: www.sap-corner.de.
The most important SAP Basis transactions are listed in this article.