Best practise for SAP users who leave the company

Hi
Could anyone reccommend a best practise document or give advice on how to deal with SAP user ID's when employee's/contractors/consultants leave? I am the basis admin just starting an SAP implementation and we have no dedicated authorisation team at the moment, so I have been asked to look into this :
Currently we set the validity date in SU01 to the termination date.
We chack there are no background jobs scheduled under that user id, if there are, we change the job owner to a valid user (we try to run all background jobs under an admin account).
We do not delete the user as from an audit point of view I believe it restricts information you can report on and there are implications on change documents etc, so best to lock it with validity dates.
Can anyone advise further?
We are running SAP ECC 5.0 on Windows 2003 64 Bit/MS SQL 2000.
Thanks for any help.

Hi,
Different people will tell you different versions of what they believe is best practice, but in my opinion you are already doing reasonably well.
What I prefer is
1. Lock ID & set validity date.
2. Assign user to user group LEAVER or EXPIRED or something similar (helps with reporting) out of SUIM/S_BCE* reports.
3. Delete role assignment (should you need it, the role assignment will be in the change history docs anyway).
4. Check background jobs & act accordingly.
For ease of getting info I prefer not to delete the ID though plenty of people do.

Similar Messages

Need rights to archive mailboxes of users who leave the company.

need rights to archive mailboxes of users who leave the company. Can anyone tell me to which group should I get added so that I can have permissions to archive mailbox ?
Regards, h9ck3r.

Hi,
Here is a duplicate thread:
https://social.technet.microsoft.com/Forums/en-US/383b75df-907d-4a86-8e62-86b2a4b00fb7/how-to-provide-an-exchange-user-permission-for-mailbox-archieve-?forum=exchangesvradmin
If you want to access other's archive mailbox, you need to grant full access permissions to user primary mailbox first, then you can see personal archive from Outlook side.
Best regards,
Belinda Ma
TechNet Community Support

Using OSS-user after leaving the company

Hello,
When you have an own OSS user id (by certification) and you leave the company, what is the status of that user id? Will it be legal or illegal to use that user-id for searching notes and downloading software after you left.
Thanks,
Richard

Hi,
I have the same question, because the previous company has the control,
Anyone with the same problem?
Thanks

Best practise for SAP landscape and copyback procedures

Can i get help on bestpractise for SAP landscape design and copy back procedures .

Hi. GO to http://help.sap.com/bp/initial/index.htm
There you find all about BP.
Regards, Award if helpful

Unable to run payroll for two employees who rejoined the company.

Dear Community,
We are unable to run payroll for two employees who have rejoined the company.
Any guidance would be appreciated.
Thanks in advance.

Hi,
Can you check payroll status of the mentioned employees in PA30. (IT0003)
See whether employee number has been locked for payroll or there are dates in the fields for retroactive calculation etc.
Regards;
Okan

What is the best practice for PXI controller, connect to the company network and install antivirus? Special Subnet?

I need your suggestions and common practices.

Hello TomMex,
Thanks for posting. If what you are looking for are suggestions for how to use your PXI controller in regards to some of the issues you mentioned, then here are my suggestions. For networking purposes, you can consider your PXI controller the same as any other computer; you should be able to connect it to your network just fine and it will be able to see other computers and devices that are on the same subnet. Antivirus software in general should be fine for your system until you want to install new NI software, at which point you may want to disable it to avoid issues during installation. Does this answer your question? Let me know, thanks!
Regards,
Joe S.

SAP Best Practises for Logistic Modules

Dear Reader,
Does anyone know how to find SAP Best Practises for Netweaver 2004s Logistic scenarios (SD, MM,)
The old Netwvr 2004 scenarioas are less helpful, especially in Inventory mgmt.
Thanks

Check this link, this is the latest I guess.
[SAP Best Practices|http://help.sap.com/bp_bw370/html/index.htm]
Cheers,
Neel.

Shared calendars are working, but have suddenly started prompting for login info of user who shared the calendar

My boss started having this problem this morning. It may possibly be due to an update. The calendars appear to still be working fine (not 100% sure they're
getting new updates) and I've tried deleting them and re-adding them and the problem persists. Outlook will pop up the Security prompt asking for login credentials, with the username of the person whose calendar is shared pre-filled in the user name section.
If you click cancel everything continues to work but it prompts you again in a few minutes.
These calendars have previously worked perfectly with no issues.

Hi,
Please confirm if there is any changes in Shared calendar account and your boss mailbox.
Since the issue occurs after the update in your Boss's computer, please reboot the local machine. And recreate the Outlook profile to have a try. About opening shared calendar in new profile, please open the shared calendar by the following steps:
1. Switch to Calendar pane.
2. Click Open Calendar > Open Shared Calendar.
3. Click Name to select the user who shared the calendar to this user.
4. Then click OK to open the Calendar.
Check whether there is any error when open it. If there is any permission error, please check the folder permission in shared user side.
Regards,
Winnie Liang
TechNet Community Support

TDS is Generating for employess who already leave the company

Hi Experts
i have deducted the TDS of employee which are leaved the company in previos year but when runing report PC00_M40_F24 then its not showing for leaved employee.
can anyone please help me?
Regards
Ratan

Hi Ratan,
For form 24Q to be generated consistently, make sure you have done challan mapping correctly.
For form 24Q you have to use PC00_M40_F24Q and for challan mappin you have to use PC00_M40_CMAP.
For challan mapping help documentation you can goto:
Service.sap.com/HRIN -> Media Center -> Key Documents -> Challan Mapping. Once mapping has been done, data will appear in form 24Q as well.
Regards,
Nishtha

What is the best practise for setting dirty flag of a page/view?

For a page/view, normaylly there are 2 things to do for diry data:
1. when it's clean, Save button is disabled, when it's dirty, save button is enabled.
2. when it's dirty and the window is closed, a popup says "you have unsaved data, close will lose the data".
My thought is: it must be handled at client side, because not all valuechange is auto submitted. E.g., you type the 1st letter of a string in a input box, the server side does not know it, but save button should be enabled immediately.
Is it possible to capture all valueChange events in a page or a view at client side?
I'm not sure what is the best practise for setting dirty flag? If there is better solution? Does ADF provide facility for this?

public void save(ActionEvent event){
boolean formValid = isFormValid();
   if (formValid) {
save button is enabled.
    private boolean isFormValid() {
        boolean valid = true;
        if (Check Condition 1) {
            valid = false;
           showErrorMessage1();
        if (Check Condition 2) {
            valid = false;
           showErrorMessage1();
        return valid;
    private void showErrorMessage1() {
                when it's dirty and the window is closed, a popup says "you have unsaved data, close will lose the data".

What is the best way to erase my computer for personal stuff while leaving the computer ready to use

what is the best way to erase my computer for personal stuff while leaving the computer ready to use

If the Mac came with Mountain Lion or Lion, press Command, Option and R keys on boot, open Disk Utility, erase the disk and reinstall Lion or Mountain Lion. If it came with Snow Leopard or older, insert the DVD, press C key on boot, go to Utilities > Disk Utility, erase the drive and reinstall Snow Leopard

Wats the best practise for performance

Hi all,
In my out line i have 15 dimensions and for one dimension i have 39000 members so wat is the best practise for performance , If we have more dimensions and more meebers is there any problem for performance
so wat is the best practise for dimensions and members??
Thanks in advance??

If it is ASO application it is not a problem.
If it is a BSO application surely it will hit the performance.
More dimensions will create performance issues.
If the said 39000 members dimension is a Flat dimension. It will be another issue.
If BSO is obvious try to split into two models.
Create intermediate groupings for the Filat dimension.

To find out the user who ran the report earlier.

Hi,
I need to generate a report to list out the programs which are accessed/executed by the user in SAP for a particular month.
Could you advise me where this information will be available in SAP?.
Thanks,
Moderator Message: Frequently Asked Question. Please search for available information first.
Edited by: kishan P on Oct 22, 2010 10:35 AM

Hello Zerandib,
on Oracle level all you could find out is that user SAPSR3 (or whatever the schema name
is on your installation) deleted the record. It is not possible on Oracle level to identify
SAP users who delete records. So if the SAP system doesn't log the change, there is
no way of finding out via Oracle internal records.
The best you could hope for is to identify the time when some specific record was deleted.
You could use either Flashback Query, Flashback Version Query, Flashback Transaction
Query or Oracle Logminer to accomplish this. Anyway these procedures aren't trivial and
it is questionable whether the effort is justified for the result.
Regards,
Mark

Best practise in SAP BW master data management and transport

Hi sap bw gurus,
I like to know what is the best practise in sap bw master data transport. For example, if I updated my attributes in development, what are the 'required only' bw objects should I transport?
Appreciate advice.
Thank you,
Eric

Hi Vishnu,
Thanks for the reply but that answer may be suitable if I'm implementing a new BW system. What I'm looking for is more on daily operational maintenance and transport (a BW systems that has gone live awhile).
Regards,
Eric

Best Practise for connecting to Ethernet based device

Hi,
I have inherited a system where we have a cDAQ-9181 controlling an vehicle access barrier, with a LabView application on a PC talking to it via Ethernet.
(The application is very simple - press a button > send a value to the 9181 unit > opens the barrier )
All works fine most of the time.
( We occasionally get network related errors. The LabView application sometimes thinks another PC has reserved the unit, or gives “error 89130 - device not available for routing” )
The users would now like to be able to easily run the application from a second PC ( not at the same time ), but this seems to be a problem. If I exit the application on PC “A” and run it on PC “B” it struggles to reserve the chassis, and throws the “89130” error and I have to restart the unit via MAC.
While I’m a “veteran” control programmer, I’m new to LabView, and would be very grateful for any pointers on “best practise” for talking to devices via Ethernet, or any specific suggestions for handling multiple PCs talking to a single device.
Thank You.
Tim.

Hi Tim,
Thank you for your post and welcome to the NI forums.
There are lots of knowledgebase articles on our website and you should be able to find documentation for most of our hardware.
There is a good troubleshooting guide for cDAQ Ethernet here (http://ae.natinst.com/public.nsf/web/searchinternal/e67b4e4749f378ff862577270059bd4b?OpenDocument) - it outlines the steps to take to ensure you have a stable a connection as possible. You may have already seen it, but the quick-start guide for your specific device may also be worth consulting for best practices. Are these helpful?
As for using more than one PC - this shouldn't be too much of an issue. I would expect that the resource isn't being closed correctly - when you exit the App on PC 'A', how are you closing off the resource?
Best regards,
Eden S
Applications Engineer
National Instruments UK & Ireland

Best practise for SAP users who leave the company

Similar Messages

Maybe you are looking for