Authorization management: Preparation and follow-up of audits as well as ongoing or selective support
Table of contents
This step is of fundamental importance for the SAP basis. It concerns both the inward-looking perception described in the marketing & self-understanding recommendation and the outward-looking perception in the form of a mission and vision.
If you now want to change the permission data, you will be asked for values for the appropriate organisation levels. First enter a tilde (~) and define the value later in the derived roles. Maintain the permissions you want and then generate the master role. Adding the organisational level to the master role Step 2: Define derived roles Create derived roles Assign the master role After you have created the master role, it is the derived roles that are in the process. To do this, re-enter a suitable role name via the PFCG. In our example, it is called "findepartment_d01". For a better overview, it is usually useful to name and number the derivatives after the master roles. You can also define the roles according to a different scheme. After you have created the role, you must then enter the master role in the Derive from Role field in the Description tab. Confirm the Auto Enquiries. Customise the Organisation Levels Now go to the "Menu" tab. There you can see that the data from the master role was automatically copied. Since the role has not yet been generated, the Permissions tab is currently highlighted in red. Therefore, call "Change Permissions Data". The first call should automatically open a dialogue to maintain the organisational levels, as they are still empty. If this is not the case, or if you would like to adjust the organisational levels again in a later case, you can also access them via the button Ordende (see screenshot). If everything worked well, you can now see that the permissions were also automatically taken from the master role. If you generate the role, the permission tab will also appear green. Congratulations, you have successfully created a derived role! Repeat step 2 with the additional derivatives to adjust the organisation levels accordingly.
CHANGE TO A NEW ROLE APPROACH
The SAP basis requires a separation layer to upstream and downstream IT departments, which is clearly defined. In the direction of the infrastructure, for example, this can be the upper edge of the operating system. This distinction must also be drawn in the direction of application development. Here there are various services offered today by the SAP basis, which are more closely related to application, such as control of background processing, transport or also the automation of certain activities. In principle, it is necessary to examine which tasks can continue to be carried out in the SAP basis due to the requirements and which can be given in expert units.
Once you have met all the requirements described above, you can begin to prepare your system for processing digitally signed notes. To do this, the SAP Note with the number 2408073 must be recorded. This consists of a few steps for manual preparation, some automatically executable activities, and steps to rework the note. It is recommended not to change the file name after downloading. Note 2408073 has a file extension of "sar" and will first be unpacked with SAPCAR. There is a zip archive in it. The text file in it can be loaded into the Note Assistant with the SNOTE transaction via the Note upload. Once you have completed these steps, you can begin to install the note. The steps are detailed in the note itself and in a document attached to the note. Therefore, only a few points that need to be considered are highlighted below. When creating and clicking on Save the "CWBDS" object, a message may appear prompting you to select an object from the permitted namespace. Here the cursor can be placed in the object field and confirmed with Enter, then the query is made after a transport order. When creating the message texts in the "SCWN" message class, it is normal that after saving the changes several times (as many times as messages have been created) the question about the transport order must be confirmed. In addition, when creating the message texts, it should be noted that the texts provided in the tutorial attached to the note are available in English. If you are working on a German system, you should translate the texts into the German language when inserting them. The English texts can then be inserted as translations in the same window. To do this, select "Jump -> Translate". Conclusion It is a popular approach among hackers to use updates that are usually intended to fix bugs or increase security to inject malicious code into the system.
The "Shortcut for SAP Systems" tool is ideal for doing many tasks in the SAP basis more easily and quickly.
SAP Basis operations manage the IT underlying the SAP system.
Resource management such as memory, buffers, etc.