Profiles for Basis Admins

Does anyone have a list of transactions that would be considered adequate for a basis administrator on a production system, which would allow them to do all the work they may need to without logging in with a sap_all id?
What is the best practice for access for basis in production?
Lee

Hi Lee-
I can understand where are you coming from :). You needed the list of all possible basis tcodes in production environment rather adopting strenuous task of deriving and identifying all required functionality from SAP Standard role template for basis. Not an issue
You can refer the tcodes listed below in production environment. It includes all required for regular support, monitoring & performance analysis.
SSO2      Workplace Single Sign-On Admin.
STRUSTSSO2      Trust Manager for Logon Ticket
BD82      Generate Partner Profiles
SMT2      Trusting systems (Display <->Maint.)
SPAU      Display Modified DE Objects
SDCCN      Service Data Control Center
SLG1      Application Log: Display Logs
SGEN      SAP Load Generator
STMS_MONI      TMS Import Monitor
STMS      Transport Management System
SCOOL      COOL Repository
PFUD      User Master Data Reconciliation
SMMS      Message Server Monitor
SICK      Installation Check
SMICM      ICM Monitor
SE38      ABAP Editor
AL04      Monitor call distribution
AL08      Users Logged On
AL11      Display SAP Directories
AL12      Display table buffer (Exp. session)
AL13      Display Shared Memory (Expert mode)
AL15      Customize SAPOSCOL destination
AL16      Local Alert Monitor for Operat.Syst.
BD21      Select change pointer
BD50      Activate Change Ptrs for Mess. Type
BD51      Maintain function modules (inbound)
BD52      Activ.change pointer per chng.doc.it
BD54      Maintaining Logical Systems
BD64      Maintenance of Distribution Model
BD97      Assign RFC dest. to Logical Systems
CK11      Create Product Cost Estimate
DB01      Analyze exclusive lockwaits
DB02      Tables and Indexes Monitor
DB03      Parameter changes in database
DB12      DBA Backup Logs
DB6BACKHIST      DB6: DBA Planning Calendar
DB6CLP      DB6: Command Line Processor
DB6COCKPIT      DB6: DBA Cockpit
DB6EXL      DB6: Analyze Exclusive Lock Waits
DB6PERF      DB6: DB2 UDB Cockpit Performance
DB6SPACE      DB6: Space Analysis
FTXP      Maintain Tax Code
KOSRLIST_PR      Projects/Nets: Coll. Displ.SettRules
LBWE      LO Data Ext.: Customizing Cockpit
LSMW      Legacy System Migration Workbench
OS01      LAN check with ping
OS03      O/S Parameter changes
OS04      Local System Configuration
OS05      Remote System Cconfiguration
OS06      Local Operating System Activity
OS07      Remote Operating System Activity
OSS1      Logon to SAPNet
OY05      Factory calendar
RBDMIDOC      Variant for RBDMIDOC
RSA7      BW Delta Queue Monitor
RZ01      Job Scheduling Monitor
RZ03      Presentation, Control SAP Instances
RZ04      Maintain SAP Instances
RZ10      Maintain Profile Parameters
RZ11      Profile Parameter Maintenance
RZ12      Maintain RFC Server Group Assignment
RZ20      CCMS Monitoring
SA38      ABAP Reporting
SAINT      Add-On Installation Tool
SALE      Display ALE Customizing
SASAPIMG      Call Up Project IMG
SBIW      BIW in IMG for OLTP
SCON      SAPconnect - Administration
SCOOLTOOL      COOL Tools
SCOT      SAPconnect - Administration
SCU0      Customizing Cross-System Viewer
SCU3      Table History
SE03      Transport Organizer Tools
SE06      Set Up Transport Organizer
SE12      ABAP/4 Dictionary Display
SE13      Maintain Technical Settings (Tables)
SE15      ABAP/4 Repository Information System
SE18      Business Add-Ins: Definitions
SE37      ABAP Function Modules
S_TABU_DIS Display Tables (customize it to ztcode)
SCC4 (customize it to ztcode)
SE63      Translation: Initial Screen
SE11      ABAP Dictionary
SE11_OLD      ABAP/4 Dictionary Maintenance
SE80      Object Navigator
SE81      Application Hierarchy
SE82      Application Hierarchy
SE84      R/3 Repository Information System
SE93      Maintain Transaction Codes
SESSION_MANAGER      Session Manager Menu Tree Display
SICF      HTTP Service Hierarchy Maintenance
SM01      Lock Transactions
SM02      System Messages
SM04      User List
SM12      Display and Delete Locks
SM13      Administrate Update Records
SM14      Update Program Administration
SM20      Security Audit Log Assessment
SM21      Online System Log Analysis
SM28      Installation Check
SM35      Batch Input Monitoring
SM36      Schedule Background Job
SM37      Overview of job selection
SM37C      Flexible version of job selection
SM38      Queue Maintenance Transaction
SM49      Execute external OS commands
SM50      Work Process Overview
SM51      List of SAP Systems
SM56      Number Range Buffer
SM58      Asynchronous RFC Error Log
SM59      RFC Destinations (Display/Maintain)
SM61      Backgroup control objects monitor
SM62
SM63      Display/Maintain Operating Mode Sets
SM64      Trigger an Event
SM65      Background Processing Analysis Tool
SM66      Systemwide Work Process Overview
SM69      Maintain External OS Commands
SMEN      Session Manager Menu Tree Display
SMGW      Gateway Monitor
SMLG      Maint.Assign. Logon Grp to Instance
SMLT      Language Management
SMQ1      qRFC Monitor (Outbound Queue)
SMQ2      qRFC Monitor (Inbound Queue)
SMQR      Registration of Inbound Queues
SMQS      Registration of Destinations
SMT1      Trusted Systems (Display <-> Maint.)
SMX      Display Own Jobs
SNL1      Display NLS (character set, lang.)
SNOTE      Note Assistant
SNRO      Number Range Objects
SNUM      Number Range Driver
SO00      SAPoffice: Short Message
SO01      SAPoffice: Inbox
SO02      SAPoffice: Outbox
SO03      SAPoffice: Private Folders
SO04      SAPoffice: Shared Folders
SO05      SAPoffice: Private Trash
SO07      SAPoffice: Resubmission
SO23      SAPoffice: Distribution Lists
SO50      Rules for inbound distribution
SO99      Put Information System
SOST      Overview transmission requests
SP01      Output Controller
SP12      TemSe Administration
SPAD      Spool Administration
SPAM      Support Package Manager
ST01      System Trace
ST02      Setups/Tune Buffers
ST03      Performance,SAP Statistics, Workload
ST03N      R/3 Workload and Perf. Statistics
ST04      DB Performance Monitor
ST05      Performance trace
ST06      Operating System Monitor
ST07      Application monitor
ST10      Table Call Statistics
ST11      Display Developer Traces
ST14      Application Analysis
ST22      ABAP dump analysis
STAD      Statistics display for all systems
STAT      Local Transaction Statistics
SU01D      User Display
SU03      Maintain Authorizations
SU51      Maintain Own User Address
SU52      Maintain Own User Parameters
SU53      Evaluate Authorization Check
SU55      Call the Session Manager menus
SU56      Analyze User Buffer
SUIM      User Information System
S_BCE_68001285      Transaction S_BCE_68001285
S_BCE_68001402      With Unsuccessful Logons
S_BCE_68001418      Act. Grps According to Complex Crit.
S_BCE_68001420      Act. Grps According to Complex Crit.
S_BCE_68001429      Transactions for User
TU02      Parameter changes
USMM      Customer measurement
WE02      Display IDoc
WE05      IDoc Lists
WE07      IDoc statistics
WE08      Status File Interface
WE09      Search for IDoc in Database
WE20      Partner Profiles
WE21      Port definition
WE30      Development IDoc Type
WE46      IDoc administration
WE60      Documentation for IDoc types
WE61      Documentation for IDoc record types
WE63      Documentation
Cheers!
Ashok

Similar Messages

Check List For Basis Admin

hi all,
Please Send me the standard daily activity check list of Basis Admin.
Thanks
regards
Raghvendra Bhanap

Hi,
Daily activities are generally,
Tcode: ST22 is for Dump Analsys,
            sm 37 also used for any Monitoring background job,
             st03n is for system response time analsys,
             bd87 also one Tcode related idocs posting.
            sm12 and sm13 is related to locks and database update and
              sm66 all current running process in the system.
if u need any help let us know..
Thx

Licence for Basis

Hi
We currently reviewing some of the roles basis do and are looking to give printer setup to another team. Our basis team has the idea from a course they attend at clockhouse that Basis do not need to have a licence is this correct and if so what category should we list them under?
thanks
julian

Hi,
If "by having a licence" you mean having to pay a SAP licence for Basis admins, then sorry to stop your dreams but the SAP company is not rich by giving out free licences.
You have to check your contract with SAP but I can assure you that my company does pay for each basis admin.
However it is much cheaper than for developpers.
Regards,
Olivier

Cannot select ldap user profile for SGD Global Admin

Hi all,
I'm trying to select some ldap users to be in the SGD Global Administrators role, but I am unable to check the check box next to the user profile once I navigate to the account. There is no check box to check.
I am actively using LDAP for regular user auth and application assignment, so I know my LDAP "works" in that sense, I just can't use it to assign global admins.
Any thoughts?
Adam

The only way to do this is to create a user profile for the (would-be) admin account. And since they're an LDAP user, you'll have to use LDAP mirroring to do this. For example, let's say the user you want is "cn=Joe Admin, ou=Users, dc=example, dc=com"
Go to "User Profiles", and browse to/open:
dc=com
cd=example
create the directory object "ou=Users"
Inside of "ou=Users", create the user profile object "cn=Joe Admin"
Add this user object to the Global Administrators role.
http://docs.sun.com/source/820-4907/chapter3.html#d0e13589

What a basis admin can do for PLM except install/upgrade?

We plan to introduce PLM into our SAP shop.
We want to now except install/upgrade, what kind of configuration, troubleshooting, etc., a basis admin can help.
Please help. Thanks a lot!!

Hi Christy,
There are a few bits of PLM config. which can require Basis assistance due to quirks such as requiring post-processing after a transport has been applied. An example of this that springs to mind is costing sheet configuration for adding overheads to order costs.
Thanks,
Richard

Cisco 4402 LAP1131 Interference Profile Failed for Base Radio MAC:

Dropped connections every day, few times a day.
WLC Was working perfectly fine for about a year then had some dropped connections.
Upgraded to the latest firmaware and also default it to the factory and reconfigured it.
Same problem!
Cisco 4402
Software Version 7.0.98.0
8x Cisco: AIR-LAP1131AG-A-K9 also v/7.0.98.0
Interference Profile Failed for Base Radio MAC:

This is a threshold parameter: "Interference Profile failed" along with some others. All this does is send alerts to the WLC log, to your syslog or to your WCS/NCS or Prime Infrastructure management tool. You need to adjust these for your environment if you see too many alerts being triggered. Interference can be a main issue in downtown big citites and you would bump the value up to reduce the number of alerts you see. Yes interference will cause issues, but this is an alert threshold and will not fix your interference, just tell you that you have interference due to hitting the X value.
Thanks,
Scott
*****Help out other by using the rating system and marking answered questions as "Answered"*****

Sample exam paper for SAP Basis Admin

is there any website where i can download the sample exam paper of SAP Basis admin?

Hi,
There are lots of technical questions for MS SQL Server, you should know the db in order to answer.
I would suggest you to call SAP and ask them to make the exam for the database you know. Usually is like that, they dont force you to make whatever exam, you have to tell them which platform and database you would like to make the exam for.
Good luck,

What a basis admin can help with BPC version for NW?

Hi!
My company has installed BPC verion for NW platform.
I wonder there is any BPC specific work that a basis admin can help?
Thanks for your info.

Hi
Since your question is particular to any specific issue
I would suggest you to attend ADM555 training offered by SAP eduction division.(ofcourse if possible to you).
Otherwise, if any issue please post that in the form back.
Regards
Sekhar

What a basis admin can do for CRM2007/7.0?

Hi, good morning,
I have good experience at SM7.0 basis.
Now I am assigned to support CRM2007/7.0 as a basis admin who has NO any coding experience.
Could you tell me besides install/patch/upgrade, what CRM integration or configuration I can do ? Or in other
words, what is the CRM basis area?
Thanks!

Well, that depends....You will have to apply SAP Notes, some will be manual and some will be direct. You will also provide PFCG roles to the Users and there are more activities as you get along.
Rg,
Harshit

Issue with .profile for oracle 9i and 10g

Here I have six oracle 9i databases on one box. I am going to upgrade five of them to oracle 10g and want to keep one database RCAT in oracle 9i for one or two week.
So, when I do upgrade I have to setup oracle home for 10g and also profile for oracle user for 10g (correct me if I m wrong). But now I want one database RCAT on oracle 9i. How can I take care of this.
I mean how I will handle profile and all other thing for oracle 9i and 10g at the same time.
Thanks,
Vishal

Install 10g under the same OS user as 9i, of course on a different Oracle Home. Then you configure your .profile consequently. Just as an example, this is my .bash_profile with 10g and 11g with the same oracle OS user :
[oracle@linux5 ~]$ cat .bash_profile
# .bash_profile
# Get the aliases and functions
if [ -f ~/.bashrc ]; then
        . ~/.bashrc
fi
export EDITOR=vi
export ORACLE_BASE=/home/oracle/base
umask 022
o10()
{       export ORACLE_SID=db102
        export ORACLE_HOME=$ORACLE_BASE/OraHome10
        export LD_LIBRARY_PATH=$ORACLE_HOME/lib
        export PATH=$ORACLE_HOME/bin:/bin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin
        export TNS_ADMIN=$ORACLE_BASE/OraHome11/network/admin
        export PS1='[\u@\h_10 \W]\$ '
o11()
{       export ORACLE_SID=db11
        export ORACLE_HOME=$ORACLE_BASE/OraHome11
        export LD_LIBRARY_PATH=$ORACLE_HOME/lib
        export PATH=$ORACLE_HOME/bin:/bin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin
        export PS1='[\u@\h_11 \W]\$ '
s()
{       sqlplus / as sysdba
asm()
{       export ORACLE_SID=+ASM
db10()
{       export ORACLE_SID=db102
db11()
{       export ORACLE_SID=db11
asm10()
{       export ORACLE_SID=asm10
[oracle@linux5 ~]$

Use one profile for all user profiles in Server 2012 R2

Hi
I am setting up an Windows Server 2012 R2 Template on VMware.
I will do som changes with the local admin user, and want all user that will log in to servers made from this Template, get the user profile I have set up for the admin account.
How to I do that?
Regards
StigKSand

the way I used to do this was to create a new profile the way I wanted with any shortcuts applications etc installed. then I would create another user account on the PC and make it an admin.
reboot the pc to ensure it hasn't got the pre-configured profile loaded and login with your newly created admin account.
then right click This PC in windows explorer and select properties, then select advanced system settings, and select user profiles on the advanced tab. You can then select the profile you made all the configuration to, and click copy and then select default
profile.
this should then mean any new users who login get this default profile on this server.
hopefully that is what you were referring to.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
My Blog
LinkedIn:

Password for user admin

Hello,
I have to change the PW for user admin and tried to do this in the ERP/SU01 on every client.
The connection to XI was lost. The error 'can not read exchange profile' occurred.
I reset the password of user admin in all clients to default and entered the user admin and password in the http://<xi-host>:<j2ee-port>/exchangeProfile.
This worked fine.
But now I get the periodic error that user admin on client 200 is locked due to wrong logon and XI does not work. Error as described above
Okay. I can unlock user admin, but the error occurs periodically.
Is there a description how to change the PW for user admin and get rid of this error. I found a SAP Note (936093), is this the way to do it?
I assume user admin is locked every time the portal fails to contact XI, but I am not sure.
Best Regards
Maximilian

Try reflashing the firmware and see if that alleviates the issue. If not call into 866-606-1866 for further troubleshooting.

How to use the same Windows-Profile for over 700 Users?

Dear admins,
i´d like to use one (1!) shared windows profile to serv over 700 user-accounts in our school. But there is a little complication in the WGM.
I just tried to check all users and entered the path of the shared profile right in the windows tab.
For example \\Server\Profiles\oneforallprofile
Unfortunately the WGM put the user´s shortname behind this path.
For example: \\Server\Profiles\oneforallprofile\mistersmith
or \\Server\Profiles\oneforallprofile\sallymiller and so on.
By changing this preference one by one it works, but of course i need a solution to do that for all users.
Does anyone know how to set one Profile for all students?
Thanks for your help!
Rolf
XServe G5 Mac OS X (10.4.5) Educational System Administrator

Hello Prasad,
Most likely the user km_admin still has system principal roles assigned, even though you removed the Super Admin role, you should check that this user doesn't have any other admin roles, otherwise it will be considered a System Principal user and will therefore still have access to all content. For more information see http://help.sap.com/saphelp_nw70/helpdata/en/19/56f28fbd4e11d5993b00508b6b8b11/frameset.htm
Try creating a new user with just read access to the content and you should see that it will not be able to make any changes etc.
Regards,
Lorcan.

Windows cannot load the user's profile but has logged you on with the default profile for the system.

My Windows 7 crashed a couple days ago after a windows update, I got this message.
Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
I restarted the machine and got this message
Windows was unable to load the registry. This problem is often caused by insufficient memory or insufficient security rights.
DETAIL - The process cannot access the file because it is being used by another process. for C:\Users\TEMP\ntuser.dat
I checked the event Log I found these .
Windows cannot load the user's profile but has logged you on with the default profile for the system.
DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.
Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.
Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile.
DETAIL - The process cannot access the file because it is being used by another process.
This is the first error in the event viewer after a successful logon
The description for Event ID 34 from source ccSvcHst cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
ccSetMgr
Windows cannot load the user's profile but has logged you on with the default profile for the system.
DETAIL - Access is denied.
Looking at the Logs all I can tell is that after the Desktop Window Manager started if caused this error.
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
then this one
The Desktop Window Manager has exited with code (0x40010004)
Then this before it shutdown.
The User Profile Service has stopped.
I started up the PC and the first message I got was
How can I get access to my user profile? do I need to createa new Administrator account? Please help
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.

hi do the following
1. In Search programs and files (Windows 7) area, type in regedit, and press Enter.
2. If prompted click yes,
3. expand the following HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
4. click the sid that related to your admin profile (if you not sure, click each sid and in turn look to the right hand side of registry editor it will show who that sid is related to one of the registry files should hae in description localhost\admin or
something similair)
5. right click the sid and press delete.
6. restart your machine and log back on with the admin account, this will then rebuild the admin profile... dont worry when it loads and none of your personal settings are saved or files or folders... go to c:\users
in here you will see two folders for the admin account, one will be just admin and the other most likely admin.localhost
i cant remember which one is which but just check both, one will still have all your files and folders in it.
i suggest making a backup of your data before doing this incase something does go wrong, but ive had this happen many times in a domain enviorment and has worked for me everytime.

How does Adobe make their camera profiles for ACR and Lightroom?

I'm not interested in the proprietary algorithms , but I am curious as to the photographic mechanics and hardware tools used by Adobe to make the various camera profiles as they differ markedly from the ones I make using the DNG Profile Editor.
My methodology is to set an X-Rite 24 patch Color Checker target, light it evenly with electromic flash (with 0.1 stops from center to corners as mesured with a Sekonic L-758r Meter) and make a series of exposures bracketed in third of a stop increments around the meter reading in case the camera sensitivity differs from the meter's.
I then process the raw files and convert them to the DNG format, select the best exposure and run it through the DNG Profile editor. My results differ from Adobe's generic profiles for that camera enough that that I don't thin kthe difference can be credited to the difference between a generic profile a specific camera.
How do the different tools work in the DNG converter? Starting with the Options for "Base Tone Curve"? Is there a document a moderately color geeky person can understand that explains this?
I thin kthe DNG Profile editor is a great and under usedtool. I wish more people knew about it.
Thank you for your time and consideration.

Someone who only eats sausage may not want to know how it's made. Someone who creates things with food, a chef, a cook, or otherwise is thinking about a career in the food industry, might have a interest in such things. Someone who is thinking of making sausage will want to know all the details. Someone who is concerned with the public safety might want to know how sasauge is made.
It would be nice for a sausage maker to give some hints about the process as compared to what each of us can do with the DNG Profile Editor and to the original poster's question, why are our profiles different from Adobe's?
It is my experience that when I create a profile with the DNG Profile Editor, and then compute the color error for each of the 24 color patches of a CC24, using a program like Imatest, some colors are quite a bit off and some are very close, and the colors that are off, are not the same ones that are off when I compute the color error using one of the Adobe Standard or Camera Standard profiles.
Is Adobe using more detailed and sophisticated color targets with hundreds of different colors, or if not, do the tools provide more feedback and allow more manual manipulation of the profile and so the differences are due to their judgement about which colors to make "right" and which ones to let have more error associated with them, that can be manipulated by hand instead of merely letting the DNG Profile Editor apparently distribute the error amongst the various colors with some sort of even-handed calculation.
For example it is easy to imagine that someone tweaking a profile by hand with a live readout of the error of each of the colors plus an overall composite error, might put more emphasis on skin tones being right if they have a background in people photography, or more emphasis on bright colors being right if their experience is in textiles and the current trend in the US is bright colors--and a different emphasis when the trend is muted colors so there is cultrual bias and life-experience coloring a "standard" profile.
In other words, how much of the difference between Adobe and our profiles are due to Adobe having different or better science, and how much of it is due to Adobe have different or better "artists" who decide what colors to make correct compared to others.

Profiles for Basis Admins

Similar Messages

Maybe you are looking for