SAP Security | Forum profile

Hi fans Has anyone used this table. It contain listing of the authorisation generated. I have been told it can be used to convert generated profiles from DS1,DS2,DS3 into manaul profile. I have few handared RSECDMIN roles generated and would like to change them to be like manually created profiles, and reluctant to do that until I hear somone has done it before regards Massoud

From a security perspective, our current business process revolves around manual password assignment to a new BP account. Member of the security team assign a manual password of their choice which they send to new user who is required to change it at first logon. We want SAP to assign an automatic password when an account is created. Is there a solution? Thanks

Dear fellow security people, I was asked to restrict the usage of upload files via KPF6 (in the main screen Extra/Excel Planning/Upload so that some people can use it and others not. For this I activated S_DATASET in SU24 for this transaction but when I simulate the upload process I do not see any S_DATASET checks in the tracefile. Only S_GUI and S_ALV_LAYO checks which are too commonly available to be of use. Does anyone have any suggestions...

Hello! We are implementing HCM and I'm trying to make structural authorizations for that. Sap documentation says that 2 function modules are delivered in the standard system: HR_GET_MANAGER_ASSIGNMENT and HR_GET_ORG_ASSIGNMENT. Our system says that "Funcions module does not exist". Should we install them somehow or what I'm missing? Thanks for your help

Hi, The system does not need to be open to maintain profile params.

Apologies if this has been asked before - I couldn't find it. Does anyone know if the client has to be open for changes in order to maintain system parameters? I'd be grateful for any information on this subject. Thanks & Regards

Do you know if there is any way to control which application server a users logs onto other than creating an entry on the logon pad? I want to force a specific list of users to log onto a specific server. I know this can be done through the logon pad but if somehow they get onto another users’s computer then it won’t work. I was thinking in SMLG there may be a way to assign specific user IDs to the logon group, but I can’t find anything.