Best SAP Security Practices Print,file,job schedule, archiving

Hello All, i would like to know in your experience which will be the best practices for Security  for this list below:
- Printer security (especially check printing)
- File path security for export/import
- Best Practice for Job Schedule and Spool file
- Archiving process (I can't think of any specific to security, other than Security Audit Logs)
Are there any special transactions/system settings/parameters that must be on place in order to hard SAP Systems?
Do you have any documentation related?
I mean for example Job, spool i think user must just only run heir own jobs,and se their own works for printing, is there a paremeter to athenticate Prints/user, etc.
Please let me know your comments about those related issues.
I appreciate your help.
Thanks a lot.
Ahmed

Hi,
PFCG_TIME_DEPENDENCY
This is best to run once a day mostly after 12.01 am as it removes the roles which are invalid for current date. As role assignment is on date basis there is no advantage of running it hourly.
/VIRSA/ZVFATBAK
This is for GRC 5.3, and this job is to collect FFID logs from backend to GRC repository, so if you have frequent FFID usage you can schedule it hourly or for every 30 min too, if you have enough bandwidth in your server to get the latest log report. or else you can have it scheduled for twice a day too, so it is purely based on your need.
Hope this helps.
BR,
Mangesh

Similar Messages

  • SAP- PM workorder printing - batch job

    Hello Friends,
    Does anybody know the process of SAP- PM work order printing in batch job?
    Please help.
    Thanks & Regards,
    Vaibhav

    Thnaks for your suggestion we checked the program as per your suggestion but we are not getting the prints of PM orders. We think that program is for PP orders as it is selecting the PP orders only after some modification. Do you implemented that if yes then could provide some tips to execute that program.
    BR,
    Vaibhav

  • OEM Job schedule definition to Flat file

    Can anyone advice me on the best method of extracting a OEM Job schedule definition - from an existing OEM server - to a flat file executable deployment script i.e. SQL*Plus script, schell script e.t.c.
    Your help will be most appriciated.

    Thanks for your response. Is this fuctionality usable after OEM Job creation?
    Message was edited by:
    kayvic01

  • What is the best practice in securing deployed source files

    hi guys,
    Just yesterday, I developed a simple image cropper using ajax
    and flash. After compiling the package, I notice the
    package/installer delivers the same exact source files as in
    developed to the installed folder.
    This doesnt concern me much at first, but coming to think of
    it. This question keeps coming out of my head.
    "What is the best practice in securing deployed source
    files?"
    How do we secure application installed source files from
    being tampered. Especially, when it comes to tampering of the
    source files after it's been installed. E.g. modifying spraydata.js
    files for example can be done easily with an editor.

    Hi,
    You could compute a SHA or MD5 hash of your source files on
    first run and save these hashes to EncryptedLocalStore.
    On startup, recompute and verify. (This, of course, fails to
    address when the main app's swf / swc / html itself is
    decompiled)

  • I can no longer print to the 3 Canon printers on my local area network. The print dialog box states that the print file is accepted and the job is printing, but the files never print. Everything worked when the computer and printers were initially set up.

    I can no longer print to the 3 Canon printers on my local area network. The print dialog box states that the print file is accepted and the job is printing, but the files never print. Everything worked when the computer and printers were initially set up.

    There may be some security issues related to the USPS PDFs.
    http://www.certified-mail-envelopes.com/signatures-usps-certified-mail-return-receipt-requested
    I can't help with the scan/print problem. You seem to have done everything I would try.
    I don't know if maybe using a registry cleaner would help.
    John Hoffman
    Conway, NH
    1D Mark IV, Rebel T5i, Pixma PRO-100, MX472

  • Creation of  File through Scheduled Batch Job

    Hi Friends.
    How to create a file through scheduled batch job .ie data has to be sent in particular file which should be stored in SAP so that The file is expected to provide quick reconciliation when data in SAP gets archived .
    With thanks and regarsds
    Uma

    Which part? The creation of the file?  Since running in background, you would need to create the file using DATASET statements on the appliation server.  You will not be able to put the file on any frontend PC or server, only on the application server where you program is running.
    Regards,
    Rich Heilman

  • SSIS package works in development environment but fails when job scheduler executes, file path invalid

    SIS package works in development environment but fails when job scheduler executes, file path invalid
    Relatively simple package to get OLE-DB connection to MS FoxPro 9.0 DB
    The failure in the job log states that the path is invalid its a network path (\\192.168.1.xxx\foldername) this has been run several ways with the remote computer being mapped as a network drive and through the \\ notation described above.
    Thinking it was a security issue between the SQL agent account and my account I tested by subsitution myself as a proxy account for the agent when running this job, again same result failed on network path.
    One issue I see is that the remote computer is running Server 2000 (legacy software incompatable with newer versions) 
    Is it possible that this is a security issue, since if i understand correctly the current MS domain security model didn't exist until Server 2003.

    Hi REIData,
    Have you got the issue resolved? Based on your description, please make sure the target folder is shared properly. If the computer on which the SQL Server Agent job runs doesn’t join the domain as the server that hosts the shared folder, you have to share
    the folder with everyone by adding “Everyone” to the people list on the File Sharing page of the folder and assign "Read/Write" permission to it.
    Regards,
    Mike Yin
    TechNet Community Support

  • Configuration Guide Job Scheduling Management with SAP Solution Manager

    Dear Gurus
    Could you please help me with the configuration guide of the Job Scheduling Management with SAP Solution Manager
    Best Regards

    Hello Luis,
    the configuration activities can be accessed via the "Implementatiopn Guide" by calling transaction SPRO in your SAP Solution Manager system.
    In SPRO navigate to -> SAP Solution Manager -> Scenario-Specific Settings -> Job Scheduling Management -> Standard Configuration and execute the following two activities.
    1. Activate Solution Manager Services
    2. Set Up Work Center for Job Scheduling Management
    Make sure that your user has role SAP_SM_SCHEDULER_EXE (or_ADMIN) assigned.
    Afterwards you should be able to access the Job Management Work Center and to create Job Documentation or to import Jobs from a Managed System into new Job Documentations.
    The following SAP notes might be usefuly as well:
    1054005  - FAQ on Job Scheduling Management
    1117355  - Work Center roles
    Kind regards,
    Martin
    http://service.sap.com/jsm

  • Job Scheduling tool with SAP SolMan

    Hi Experts,
    Please advise on among Autosys, BMC or Redwood , which one is the best to work with Sol Man in job scheduling purpose.
    Thanks

    Hi Preema,
    I would strongly recommend Redwood since it integrates with all SAp components including Solman.
    - Bhushan

  • Job Scheduling Management vs SAP CPS

    Hi Guys
    I am trying to find out what are the differences between using the Job scheduling management tool in Solution manager and SAP CPS integrated into Solution manager. What are the benifits of using CPS as opposed to using the "standared" job scheduling tool.
    santosh

    Hello Santosh,
    the link that you already got is good. Perhaps you also want to check out [http://wiki.sdn.sap.com/wiki/display/SM/FAQJobSchedulingManagement|http://wiki.sdn.sap.com/wiki/display/SM/FAQJobSchedulingManagement] and [SAP is first vendor to provide a comprehensive Job Management Suite |SAP is first vendor to provide a comprehensive Job Management Suite] for further information.
    In short SAP CPS is an advanced scheduling tool like which competes against other like UC4, Control-M from BMC etc. But all these tools do not provide any real job documentation or job request functionality in order to get the process governance right. That's where the SolMan gets into the game.
    Best Regards
    Volker

  • Regarding Background Job scheduling for file to file scenario

    Hi Guru's
    Good morining all of u
    I have one doubt on ...
    can we do background job scheduling for file to file scenario?
    Please give me response as early as possible.
    thanks and regards
    sai

    background jobscheduling for file adapter...
    you can schedule the file adapter according to your requirement as follows:
    In the  Communication Channel Monitoring Locate the link Availability Time Planning,  In Availability Time Planning, choose the Availability time as daily and say create, give the time details, select the communication channel in your case file adapter , goto the Communication Channels tab and filter and add the respective channel, save it
    /people/shabarish.vijayakumar/blog/2006/11/26/adapter-scheduling--hail-sp-19-

  • What are the best security practices for your forms and databases

    What are some of the best security practices to follow to
    ensure your database isn't attacked with injections, forms abused
    with snippets of code, and mass spam DB inserts on your
    forms?

    On Sat, 29 Mar 2008 17:17:01 +0000 (UTC), "jsteinmann"
    <[email protected]> wrote:
    >What are some of the best security practices to follow to
    ensure your database isn't attacked with injections, forms abused
    with snippets of code, and mass spam DB inserts on your forms?
    David Powers books on php for Dw give detailed advice on how
    to do
    forms, first with html, and then validate them with secure
    php
    scripts.
    http://foundationphp.com/
    ~Malcolm N....
    ~

  • Creation of file through batch job scheduling

    Hi friends,
    I have a situation where I need to select vendor / customer and after that I need to select one of the option between invoice or payments when User select vendor then it should create a file through schedule batch job .
    I am not getting how to do it .
    Please help me if any one knows about it.
    Thanks in advance.
    Gaurav

    Which part? The creation of the file?  Since running in background, you would need to create the file using DATASET statements on the appliation server.  You will not be able to put the file on any frontend PC or server, only on the application server where you program is running.
    Regards,
    Rich Heilman

  • Sending log files for scheduled jobs as attachment through mail

    Hi All,
    Can any one please help me out to write a pl/sql program to send log files for scheduled jobs as attachment through mail.
    Thanks.

    Why would anyone do that as this code has already been posted here a thousand times, it is all over the Internet, and the only thing you need to do is to search for it?
    I agree it would cost you some effort, but you are getting paid for it, and we are not getting paid for delivering it on a golden plate on your doorstep, as you can not be bothered to use online resources.
    Sybrand Bakker
    Senior Oracle DBA

  • Ep5.0 ? what jar file is the com.sap.security.api package in ?

    Hi ,
    Can i know , in Ep5.0 , what jar file has com.sap.security.api ? Please reply soon...
    Thank you ,
    avinash

    so , is there a procedure for me to use the Ep5.0 API and retrieve details from the data sources (for usermapping) ?
    Please reply me soon....
    thank you,
    avinash

Maybe you are looking for