SAP Roles and Access for SAP Implementation team members

Hi,
Is it correct practice to give SAP_ALL role access for all SAP Implementation team members in Dev and QA?
If not, what is the correct practice?
Kindly let me know

Madhu,
It is NOT correct practice to give anyone SAP_ALL in any of the systems; not DEV, not QAS, and certainly not PRD. However, many implementation teams (and particularly consultants from SIs) insist that they cannot possibly do their jobs without it. This is completely incorrect as there are specific roles for them to use for that purpose. The only circumstance where it could be justified is if you require a special "firefighter" role - and even then, I would still be a bit doubtful.
You should also consider that once you have given someone SAP_ALL, they will fight tooth and nail to keep it. It also means that they probably are not testing the user roles correctly. Most of those that insist they need it simply do not understand the security issues and probably don't care.
Just think; if they have access to do soemthing that they shouldn't and then cause a big problem, are they the ones that will have to fix it or are they going to expect you to do it? If they expect you to clear up after them, then you have the right to insist on restricting their access to cause issues in the first place.
But I know just how demanding they can be....
Best of luck
Tony

Similar Messages

  • Defining roles and access for OWB Designer

    Hi,
    Can i Define roles and access rights to different on 1 OWB Designer repository?
    I want to send my mappings for code review but i dont want them to log into the OWB designer with write access.
    How can i achieve this in the same OWB designer repository as the one i am using?
    I am using OWB 10.1.
    I found some table - WMP_USER_ROLES,WMP_GROUP_ROLES,WMP_GROUP_REPOSITORIES
    when i logged into the designer schema through sqlplus
    Thanks
    Sagar

    Hi Sagar,
    Yes you can do that. Basically you can create a db user, and then register the user with a repository. By default that user has all privileges, however it now is audited per user as to what he/she did. How to do this look at the doc (find SecurityHelper)
    To enable you to protect metadata there are a couple of strategies (implemented via a simple PL/SQL API). For an example (this one works with policies on the module level) take a look here (http://www.oracle.com/technology/sample_code/products/warehouse/files/Dev_Status_Policy.SQL)
    This would work as follows:
    - Create user REVIEW
    - Register user REVIEW to repos QA
    - For a module you want review for, set the status to QA
    Now the REVIEW user logs in and he can look at QA but cannot touch.
    Hope this helps,
    Jean-Pierre
    In your situation

  • Roles and responsebilities of sap sd implementation consultant?

    what are the roles and responsebilities of sap sd implementation consultant?

    Hi,
    Refer to this website for  roles and responsebilities of sap sd implementation consultant.
    http://www.sap-img.com/general/role-of-a-sap-functional-consultant.htm
    Simple - he is responsbile for implementation of SAP SD Module.
    Regarding Implemenation
    http://en.wikipedia.org/wiki/SAP_Implementation
    Please let me know if you need more information.
    Assign points if useful.
    Regards
    Sridhar M

  • SAP Security handover from the Onshore Implementation team Documents

    Dear All,
    We are an Implementation & Support Team and we are getting SAP Security handover from the Onshore Implementation team where in future we ought to continue the Implementation.
    Please could you let me know what others documents which we require for handling the complete security landscape for our Scenario!
    CRM, BI, BS, SOLMAN, EP and PI
    Please suggest any other documents besides the below or any other specific details with respect to each Module,
    u2022           Enterprise-Wide Role Matrix
    u2022           Role Implementation Framework Prototype
    u2022           User Authorization and Strategy Management Procedures
    u2022           User Role and Authorization Concept Technical Design
    u2022           SAP Security Organization Hierarchy Requirements
    u2022           Transaction to Role Mapping
    u2022           Role to Position Mapping
    u2022           Available authorization policy documents
    u2022           Role matrix with segregation of Duties
    Many Thanks

    What do you have defined for your support?
    Presumably you have quoted a price per call but what do you cover and how do you calculate the charge to your client?
    Please let me know so that I can undercut your quote.
    Damn - forgot to ask who your client was and the contact name.
    Cheers
    David
    Edited by: David Berry on Feb 11, 2011 12:29 AM
    Edited by: David Berry on Feb 11, 2011 12:30 AM

  • Roles and profile in SAP

    what is role and profile in SAP?
    how we can diffferentiate both?

    Hi Swati,
    Role refers to the collection of associated activities (privilages) such as transactions, reports and so on. There are 2 types of Roles, Standard Role and Derived Role. While profile is a set of authorizations that are valid for the transactions defined in that role. Roles contain no actual access. They contain a role menu composed of transaction codes. These transaction codes are then mapped into the profile automatically by profile generator. When a role is generated (once created) the profiles are created automatically by profile generator. Every transaction code is different and may require different numbers of accompanying authorization objects to execute. A single profile can only contain 150 authorizations.  Once that number is exceeded the profile generator will automatically create a second profile, sorted alphabetically by object name.
    Please refer the below links:
    The specified item was not found.
    Re: difference between profile and role
    Difference between Role & Profile
    Regards,
    Sreedhar

  • Role and responsibilities of SAP BW support consultant

    Hi Guru's,
    What is the Role and responsibilities of SAP BW support consultant?
    Regards,
    Sabari kannan.S

    XI Architect:
    He plays the role in the analyzing the landscape for which XI will be used...will take the special not on the number for legacy systems involved...type of system...how much amount of data will flow what has to be taken care for better performance etc........
    1. Design the XI for the currentl lanscape for high performance...
    2. Idebtiy the bottle necks which can appear.
    3. understanding the busnies requirement withrespective to XI
    4. Configure the XI according to the standrds
    5. Lays ground rules on the developemtnenv till golive.
    6. what's the good appproach of design when systems like CRM,BW etc are invloved.
    7 tranports methods till  production and so on

  • What are the Roles and Responsibilities of SAP Testing Consultant?

    Hello,
               i want to know about The Roles and Responsibility of SAP Testing Consultant,,pls anybody guide me Real time scenarios.
    regards,
    Balaram

    Understanding the business scenarios
    Organization Structure to incorporate the tune of the script.
    Preparation of test scripts
    Execute and record results to see if it is fine before going to approval.
    Make changes to your test script if required.
    What is Test Script (Scenario Testing)
    Header Data
    Step in Process
    Transaction Code / Program (FB60)
    Menu Path
    Description
    Field Data and actions to complete
    Expected Results
    Actual Results
    TPR
    Closing Period
    F.19 Clearing GR/IR Account
    F.13 Adjustments GR/IR Account
    Using of these above two accounts will help us in clearing the balances and adjustments to those respective clearing accounts so that the GR/IR account will be zero balance and the balances will appear in respective reconciliation accounts accordingly the balances will be carried forwarded to next fiscal year.
    GR/IR Clears the following Documents
    GL Document
    Customer Documents
    Vendor Documents
    Assignment Field is important in any document (ZUONR), Amount (DMBTR)
    Foreign Currency Valuation
    Lowest Value Method, If we are in loss then only we will account for it.
    GL Accounts which are important in Testing
    Enjoy Transaction   - FB50
    Normal Transaction - FB01
    Document Parking   - FV50
    Post with Clearing   - F-04
    Incoming Payment   - F-06
    Outgoing Payment   - F-07
    Document Related
    Reset Cleared Items   - FBRA
    Parking Document Posting  - FBVO
    Reversal Documents   - F-14
    Company Code Clearing A/C
    (Trial Balance purposes) reversal  -  (FBUB)
    Clearing Account
    Partial clearing Invoice  - 100 - Open Item
                               Paid  -   70 - Open Item
                           Balance -   30
    In Partial Clearing you can see 100 and 70 are cleared line items and 30 as balance and if it is in Residual you can only 30 as balance as it creates new line item and you canu2019t see the other cleared line items.
    As no company will use residual clearing as it affects on ageing reports.
    Open Items in Foreign Currency in all Modules GL/AP/AR  - F.05
    Master Data
    Company Code
    Currency
    Only Balances in local currencies
    Reconciliation Account Type
    Year End Scripts
    Re Grouping Receivables / Payables  - (F101)
    Bad Debts Provisions u2013 Scripts
    We assume that the customer has not paid at the end of the year you doubt whether this receivable will ever be paid. So you make a transfer posting for the receivables to an account for individual value adjustments using special GL Indicator E and Transaction Code F-21
    Carry forward Balances
    Sub Ledgers and General Ledger balances to be forwarded to next Fiscal Year
    Accounts Payables
    Vendor Down Payments
    Invoice
    Parking
    Reversal
    Outgoing Payments
    Automatic Clearing
    Manual Clearing
    Advance (Down Payment)
    Post with Clearing
    Post without Clearing
    Reset Clearing
    Carry forward
    Regrouping
    Foreign Currency Valuations
    Accounts Receivables
    Customer Down Payments
    Invoice
    Parking
    Reversal
    Incoming Payments
    Manual Clearing
    Advance (Down Payment)
    Post with Clearing
    Post without Clearing
    Reset Clearing
    Carry forward
    Regrouping
    Foreign Currency Valuations
    Other than that, it is important to know the following:
    Unit Testing
    When you test every single document is called unit testing.
    String Testing
    One transaction full activity is called string testing . For example Vendor invoice, goods received and vendor payment.
    Integration Testing
    It is purely with other modules and we have to check whether the FI testing is working with other related modules or not.
    Regression Testing
    Testing for whole database. Bring all the data into another server and do the testing is called regression.
    UAT
    When we test any particular document with the user and if it is ok immediately we have to take the signature on the document, which is signed off and can be forwarded to the immediate boss. There are some steps to be followed when we go for user acceptance testing.
    Transaction u2013 Script Writing u2013 Expected Results u2013 Compare with Actual Results
    TPR (Transaction Problem Reporting)
    While doing the user acceptance testing if we get any problems then there are some methodologies to be followed according to the companyu2019s policy and normally as a tester we always need to write on Test Script itself.
    Hope this helps you.
    Regards,
    Rakesh

  • SAP roles and BW

    I am new to SAP and BW.  A goal of mine, straight from my GEM form, is to "Increase my knowledge of the security in the SAP application by understanding SAP roles and how they apply to Business Warehousing".  Please point me to websites, books, white papers, etc.
    [email protected]

    Zip
    Please check these links and hope it helps
    http://help.sap.com/bp_biv235/BI_EN/documentation/Authorization_BW_Proj.pdf
    http://help.sap.com/saphelp_nw04/helpdata/en/52/671595439b11d1896f0000e8322d00/frameset.htm
    Thnaks
    Sat

  • Hi All, can i have some production support issues with rootcasue and resolution for SAP TM?

    Hi All, can i have some production support issues with rootcasue and resolution for SAP TM?
    Thanks,
    Sreenivas

    Hi Sreenivas,
    I would recommend that you read the Rules of Engagement and other documents in the Getting Started link (top right) before posting anymore.  Your Discussion will most likely get reported as non-specific and get removed.  If you have a specific problem with TM, please post it in a new thread with error messages, version and SPs installed, and how the error occurs and what you are trying to get TM to do.
    There are a lot of resources available in the TM Overview page which can help, so start there and maybe also look at some of the MKS (Monday Knowledge Session) recordings which should also be listed.  There are also a lot of experienced people who can help resolve issues your TM installation, but you need to provide enough information on the problems you are having.  If you are just looking for information on past problems, do a Search or simply browse through past Discussions which are marked with a green Check (Correct Answer).
    Regards, Mike
    SAP Customer Experience Group - CEG (and a Moderator)

  • Roles and authorisations in SAP BI...

    CAN ANY ONE EXPLAIN ME THE ROLES AND AUTHORISATIONS IN SAP BI /BW...???
    THANKS IN ADVANCE...

    Hi Anand,
    Refer these links from help.sap.
    BI Authorisations
    http://help.sap.com/saphelp_nw2004s/helpdata/en/be/076f3b6c980c3be10000000a11402f/frameset.htm
    BI Analysis Authorisation
    http://help.sap.com/saphelp_nw2004s/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm
    Regards,
    Hari

  • IBM Lotus Notes access for SAP solutions

    Hi SDN friends,
    Can somebody through some light on IBM Lotus Notes access for SAP solutions.
    How this works technically?

    Hi vinay
    u cn refer to these links.u cn get some idea abt IBM Lotus Notes
    IBM Lotus Notes integration with SAP CRM
    Integrating lotus notes with R\3
    ESS to IBM Lotus Notes...
    Regards
    Bhargava
    sorry for replying late,i havent seen this question.......
    pls assign points if the links are useful by clicking on the radio buttons to the left of my post

  • SAP JAM work pattern for SAP C4C Service ticket

    Can anybody familiar with the SAP JAM Work pattern for SAP Cloud for Customer Service tickets answer these questions?
    My client would like to use SAP JAM groups in Service tickets in the following way:
    C4C service agents raise service tickets which are then worked on by back-office departments (who don't have access to C4C but will collaborate on ticket resolution via SAP JAM)
    Back-office departments work on a high volume of tickets so having one JAM group per ticket is not practical. Instead we would like to have one JAM group per department
    Departmental JAM groups should be created in JAM independently from C4C
    Upon ticket creation in C4C, the service agent should be able to select the relevant departmental JAM group to collaborate and start a discussion topic
    The agent should be able to easily pick up any update/reply from the back office team on the topic he created
    Is the scenario above supported? In particular, how can one predefine/auto-select which JAM group is assigned to a service ticket?

    Can anybody familiar with the SAP JAM Work pattern for SAP Cloud for Customer Service tickets answer these questions?
    My client would like to use SAP JAM groups in Service tickets in the following way:
    C4C service agents raise service tickets which are then worked on by back-office departments (who don't have access to C4C but will collaborate on ticket resolution via SAP JAM)
    Back-office departments work on a high volume of tickets so having one JAM group per ticket is not practical. Instead we would like to have one JAM group per department
    Departmental JAM groups should be created in JAM independently from C4C
    Upon ticket creation in C4C, the service agent should be able to select the relevant departmental JAM group to collaborate and start a discussion topic
    The agent should be able to easily pick up any update/reply from the back office team on the topic he created
    Is the scenario above supported? In particular, how can one predefine/auto-select which JAM group is assigned to a service ticket?

  • Roles and Rules for workflow.

    Hi,
        I have some basic conpectual problem about roles and rules.
        What is the diffrenece between roles and rules in sap business workflow ?  What is the Tcode for Role creation/Change/Display and Rule creation/Change/Display ? 
    I am using a standard workflow for PR Release "WS20000077".
    I have done all the setting except this agent assignment using roles or rules. The default rules used in the task "TS20000159" is "20000026". The Binding from workflow to rules container is also defined by the workflow itself.
    This rules is defined using a function module.When I am putting a breakpoint in this function module and tring to execute my workflow it is not going to the given breakpoint but the workflow is running successfully as shown in the event trace "SWE2".
      What could be the problem..Pls suggest?

    Hi Tanuja,
    Go through this link for [Rule Documentation|http://help.sap.com/saphelp_nw04/helpdata/en/bb/bdc296575911d189240000e8323d3a/frameset.htm]
    And
    http://help.sap.com/saphelp_nw2004s/helpdata/en/95/ed94ee764c11d3b535006094b9c9b4/frameset.htm
    Go through this link for [Roles in Workflow|http://help.sap.com/saphelp_nw04/helpdata/en/f4/4a5536ad3d2a17e10000009b38f839/frameset.htm]
    Hope this would help you.
    Good luck
    Narin

  • Convert SQL server database into SAP readable (encrypted) XML for SAP tool?

    Could anyone kindly let me know what is the procedure to convert SQL server database into SAP readable (encrypted) XML for SAP Authoring tool???

    So If I understood it correctly there an existing propriertory question bank with SQL server. You are looking at an option to migrate all the tests and questions from the existing system to the LSO system. Right ?
    I am still not clear on the xml conversion. Have you guys found a solution which could be achieved through a xml file ?
    am not aware of a way through which you could import only a xml file and create tests/questions. If you have a sample xml file then forward me so that I could do some testing on my end.As per my knowledge you could do one of the following. I
    1. Create the tests and questions manually in Authoring Environment. It will be a time consuming task. Based on the number of questions you have you might have to assemble a team of content developers to acheive this.
    2. Alternatively, you could create a Adobe Flash based assessment. The Flash component would be the front-end and will read from a xml file to display the questions and to drive the funcationality. This would be a easier and less time consuming than creating the assessments manually in authoring environment. However, you might miss out some of the functionality available in the Test Author of Authoring Environment unless you have all the functionality replicated inside Flash. This would require one time effort in creating the Flash template and the xml file structure. Once that is created you could create multiple assessments by just replacing the xml file. If you select this approach then you would have to ensure the data from SQL is converted in the desired xml format required by your Flash component.
    Please let me know if you require any further guidance or clarification regarding this.
    Regards,
    Ravi Sekhar

  • Error while installing the SAP J2EE add-on for SAP NW XI installation

    Error while installing the SAP J2EE add-on for SAP NW XI installation  
    Posted: Jan 24, 2007 5:23 PM         Reply      E-mail this post 
    Hello,
    When I am installing the SAP SAP J2EE add-on for SAP NW XI installation I am getting the follwing error:
    CJS-00084 SQL statement or script failed. DIAGNOSIS: Error message: Executable /oracle/XID/920_64/bin/sqlplus returns 127.. SOLUTION: See ora_sql_results.log and the Oracle documentation for details
    Could some one help me to resolve this error and install the SAP J2EE add-on?
    Thanks,
    George

    Hi George,
    Kindly use the latest installation Masted in Service market place. That will possibly solve your problem.
    Regards
    Vivek

Maybe you are looking for