Scribd Logo
Importer

Bienvenue sur Scribd !

  • Manage Passwords for Privileged SAP UserIDs

    Transféré par

    laxmachada2843
    107 vues1 page
    This document outlines password management procedures for privileged user IDs in SAP environments. It defines privileged user IDs that have elevated access above general users, including SAP*, DDIC, Early Watch, and SAPCPIC. The procedures require default passwords for these IDs to be changed, the IDs kept locked until needed, and the passwords managed and issued as required by the BASIS administrators. When a privileged ID is unlocked for use, a trace is activated and reviewed after use before locking the ID again.

    Description originale:

    Titre original

    Privileged User Password Management Process

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Formats disponibles

    DOCX, PDF, TXT ou lisez en ligne sur Scribd

    Avez-vous trouvé ce document utile ?

    Ce contenu est-il inapproprié ?

    Signaler ce document
    This document outlines password management procedures for privileged user IDs in SAP environments. It defines privileged user IDs that have elevated access above general users, including SAP*, DDIC, Early Watch, and SAPCPIC. The procedures require default passwords for these IDs to be changed, the IDs kept locked until needed, and the passwords managed and issued as required by the BASIS administrators. When a privileged ID is unlocked for use, a trace is activated and reviewed after use before locking the ID again.

    Droits d'auteur :

    Attribution Non-Commercial (BY-NC)
    Téléchargez comme DOCX, PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    107 vues1 page

    Manage Passwords for Privileged SAP UserIDs

    Transféré par

    laxmachada2843
    This document outlines password management procedures for privileged user IDs in SAP environments. It defines privileged user IDs that have elevated access above general users, including SAP*, DDIC, Early Watch, and SAPCPIC. The procedures require default passwords for these IDs to be changed, the IDs kept locked until needed, and the passwords managed and issued as required by the BASIS administrators. When a privileged ID is unlocked for use, a trace is activated and reviewed after use before locking the ID again.

    Droits d'auteur :

    Attribution Non-Commercial (BY-NC)
    Téléchargez comme DOCX, PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    sur 1

    Password Management for Privileged UserIDs

    PURPOSE
    The purpose of this document is to summarize security procedures for the management of passwords for all privileged UserIDs, including SAP*, DDIC, Early Watch and SAPCPIC across SAP environments. The defined privileged UserIDs maintain system access level privileges and roles above and beyond general user privileges.

    STANDARDS
    The following standards are applicable in all environments, including Production, Quality Assurance, and Development: Default passwords for SAP*, DDIC, Early Watch and SAPCPIC UserIDs must be changed from the default password configurations. The defined UserIDs should remain locked from use until needed for advanced administrative privileges. The DIT Information Security Office will maintain these defined privileged UserIDs and issue passwords as required for emergency use by BASIS administrators. User master records should be created for SAP* in all clients of the system to prevent logging using SAP* and default passwords. The instance profile parameter login/no_automatic_user_sapstar should be set to a value of 1 to turn off the special status of SAP*. SAP* and DDIC should be assigned to user group SUPER, which protects them from deleting by anyone not having authorization to delete SUPER user records.

    Privileged User ID Chart**


    SAP User ID DDIC EARLYWATCH SAP* SAPCPIC Description ABAP Dictionary and Software Logistics Super User Dialog user for the Early Watch service in client 066 SAP System Super User User ID for communicating between process/hosts Service, System, or Dialog Dialog Dialog Dialog System Normal Status Locked Locked Locked Unlocked Production Owner ISO ISO ISO ISO Supported Process Builds, Upgrades SAP system review Emergency Access Systems communications

    **Please note: This chart and document may be updated to include additional SAP privileged UserIDs and privileged UserIDs. BASIS and any other involved parties will be notified of updates prior to implementation.

    PROCEDURE
    The steps below detail the internal procedure to manage, issue, and protect privileged UserIDs in the Production, Quality Assurance and Development SAP environments. 1. The privileged UserID passwords have been reset from their default configuration. 2. The User ID is unlocked, reset, and the new password is communicated to BASIS when circumstances require human (as opposed to system) usage. 3. A trace is also activated prior to the communication of the password to the requesting user. 4. Once temporary usage of the User ID is no longer needed and a joint decision by SAP Manager, Basis, Security and Process Owners, has been made to discontinue a trace, the trace is terminated. 5. The output of the trace is submitted to appropriate managers (SAP Manager, Basis, Security and/or Process Owners) for review. 6. After use by the human (as opposed to standard usage of these IDs for their intended purpose[s]), the User ID is again locked.

    Vous aimerez peut-être aussi