Creating clients, copying clients, deleting clients, etc
SAP ICM
The SAP basis requires a separation layer to upstream and downstream IT departments, which is clearly defined. In the direction of the infrastructure, for example, this can be the upper edge of the operating system. This distinction must also be drawn in the direction of application development. Here there are various services offered today by the SAP basis, which are more closely related to application, such as control of background processing, transport or also the automation of certain activities. In principle, it is necessary to examine which tasks can continue to be carried out in the SAP basis due to the requirements and which can be given in expert units.
Another important example is the reading permission for TemSe objects. The temporary files are often forgotten, because it is often not considered that cached (strictly) sensitive data, which is intended for only one user (owner), can be viewed by another user without permission - and across clients. The examples mentioned show us how important it is to carefully assign permissions for client-independent transactions. Download Transaction tables The transactions that enable the examples above, including certain expressions of the associated permission objects and our recommendations for them, can be found in the file "Critical cross-client permissions" for download. Other client-independent transactions are located in the Cross Clients TCODES file. The criticality of these transactions should be assessed according to the context. I recommend always being careful and keeping these transactions in mind.
Proactive and continuous optimization of system availability and performance
In addition to internal security requirements, national and international guidelines sometimes require all audit and security-related user actions to be recorded. With the Security Audit Log (SAL) you have the possibility to log all changes, e.g. for users, user master records, but also roles and groups.
Due to the variety of tasks and the high complexity, I find my job extremely exciting. There are very many constellations of SAP systems and databases. Each installation, migration and update brings new aspects and challenges. It is precisely these challenges that are important to me, so that I can continue to learn and develop professionally on a daily basis.
Tools such as "Shortcut for SAP Systems" complement missing functions in the SAP basis area.
In addition, most business processes are mapped in such a system and offer an attack surface for sabotage.
The setup involved often proves to be especially important for companies looking to implement the SAP system for the first time.