November 2017 ~ HOW TO SAP

GRC 5.3 - Valid to date is always the current date during submission of a new request

GRC 5.3 provision user with validity period the same day user was created. SU01 screen as below: In GRC you can see the following when request for a new account: This was cause by following settings in GRC 5.3 in Configuration > Field Mapping > LDAP Mapping >...

HOW TO SAP - Perform system trace for missing authorization

November 29, 2017 authorization trace, st01, system trace,

How to perform system trace for authorization Execute tcode ST01 Check Authorization Check (you may select more) Click Trace On (Make sure to turn it off after you are done!) Now ask user to perform their task. *If there is more then one app server, go tcode SM51...

VIRSA - HOW TO export mitigation control

November 28, 2017 export mitigation control, virsa,

SA38 or SE38 and execute /VIRSA/ZVRAT_L03 Enter the following details: 3. Exported file looks like: ...

SOD Scan using /n/virsa/zvrat

November 26, 2017 sod scan, virsa,

Tcode /n/virsa/zvrat Ok Enter userid Choose the system where user id was created Then execute If the system id was not found, you may add the system using those entries in SM59. To add, execute /n/virsa/zvrat_s16 Select Comp Calibrator Configuration Under Parameter 19, add in a new system...

GRC 5.3 SNC - Provision with upper case userid which cause SNC to fail

November 25, 2017 cup, grc 5.3, lowercase, snc, su01, uppercase,

GRC 5.3 is able to provision SNC settings to SU01 but USERID appears in upper case format as below: SNC is case sensitive, thus it will failed when user tried to login. Because GRC 5.3 convert user id to UPPERCASE as below: This can be resolved in two...

Table USR02 - User Lock value

November 22, 2017 user lock, USR02,

Execute SE16 Enter USR02 Below are the value and its description: Value: 0Not locked 16Lock 32Locked by CUA admin (User Admin) 64Locked by system Administrator 128Locked due to incorrect logon attempts or too many failed attempts 192A combination of both. The user is locked by admin and user...

Difference between SU22, SU24 and SU25

November 21, 2017 SU22, SU24, SU25,

Difference between SU22, SU24 and SU25 SU22 displays and updates the values in tables USOBT and USOBX, while SU24 does the same in tables USOBT_C and USOBX_C. The _C stands for Customer. The profile generator gets its data from the _C tables. In the USOBT and USOBX tables,...

What is SU24 Concept

November 20, 2017 Authorization, security, su24,

Transaction SU24 maintains the USOBT_C and USOBX_C tables. These tables hold the relationships between the particular transaction and its authorization objects. It is possible to add or subtract the checks performed in the transaction by changing the appropriate flag. •The benefit of transaction SU24 occurs when transactions are added to...

RSUSR200 Report - List user according to system, validity, User type, lock status and logon attempts

November 19, 2017 lock attempts, logon status, report, RSUSR200, search by system id, user type, validity,

Execute SA38 > RSUSR200 There are many selection. This screen show that you can select by system You may also choose by User Type Execute and report display as below ...

Display a list of user's password status and lock status

November 18, 2017 RSUSR200, SUIM, user password status,

Execute tcode rsusr200 or Tcode SUIM > User > By Complex Selection Criteria > By Logon Date and Password change Enter a list of user. You will be able to see details as below ...

User type (Dialog, system, communications, service, reference )

November 15, 2017 Authorization, security, su01, user type,

User Type You can specify the following user types: ● Dialog (A) ○ Individual system access (personalized) ○ It is possible to log on using SAP GUI. The user is therefore capable of interaction through SAP GUI. ○ The system checks whether the password has expired or is initial. ○ The user can...

Change SAP* password and default password

November 13, 2017 Authorization, password, SAP*, security,

Changing the default password for sap use You are trying to change the password for sap* user, however when you go into su01 and enter sap* as the user name, the following message is displayed, user sap* does not exist. You can delete the SAP* user using ABAP...

Create role with display mode only ACTVT 03

November 10, 2017 display, pfcg,

Tcode PFCG Enter the role name Role > Download Now open the *.SAP file which you have downloaded and edit with notepad. Search for ACTVT then change all the value *, 01, 02 and etc to only 03 Save and upload the file back using PFCG ...

ST01 trace file delete

November 08, 2017 st01, trace,

To delete ST01 trace file, it can only be done in OS level. Delete the trace file and it will be created again the next time you activate trace. ...

Check GRC 10 error log using SLG1

November 06, 2017 error log, grc 10, SLG1,

Execute SLG1 Enter GRAC or GRFN and you will be able to see the application log ...

Useful field name when you perform SUIM or display data from AGR_1251

November 05, 2017 field description, field name,

Account typeKOART Company codeBUKRS Cost elementKSTAR Distribution channelVTWEG DivisionSPART Operating concernERKRS PlantWERKS Profit centerPRCTR Purchasing groupEKGRP Purchasing organizationEKORG Sales groupVKGRP Sales officeVKBUR Sales organizationVKORG Shipping pointVSTEL Warehouse number / warehouse cLGNUM Valuation areaBWKEY Business AreaGSBER Maintenance Planning PlantIWERK Credit control areaKKBER Controlling AreaKOKRS Cost CenterKOSTL Storage TypeLGTYP Personnel...

Determind / Find / Check - GRC 5.3 Support pack and patch version

November 03, 2017 Authorization, check, grc 5.3, jspm, patch, security, support pack, version,

Three way to find the Support pack and patch version for GRC 5.3 Option 1 (via GRC CUP) Launch GRC via http://testgrc.amd.com/AE/index.jsp Click About This is SP 19 patch 7 Option 2 (via System Info) Lauch system info > http://test.amd.com/sap/monitoring/SystemInfo Click All component VIRAE is CUP and this screen show...

GRC 10 - Repository Sync failed with error "No more storage space available"

November 01, 2017 Authorization, grc 10, repository sync, security,

When you run repository sync from SPRO > GRC > AC > Sync Job > Repository Object Synch > Run in foreground You will get below error: Program for Repository User Synchronization Processing for connector GRCTEST210 Starting user synchronization for connector GRCTEST210. Error in GRCTEST210; Reason Error in RFC;...

HOW TO SAP

Popular Posts

Blog Archive