SAP SYSTEM AUDIT

good ady all,
i would really apprecite it if I could get some assistance with regards to the above. we are preparing for a system audit from external auditors.
I would like to know, How to prepare for an SAP audit: What do i need to do to ensure a successful result. what tranaction codes to i need to ru. in other words what transactions will the auditors be running when they get here?
thanks.

Oh oh oh... you are in big trouble...
Just joking.
If you have no clue where to start and what you should have / could have been doing already (the auditors will lookmfor this...) then start transaction 'SECR'. It is obsolete, but will point you to the Audit Information System's role menus. You can then follow through them to cover the basic stuff which an auditor will look for as well.
Cheers,
Julius

Similar Messages

SAP SD system audit

Dear Gurus
What are the areas to be checked at the time of SAP audit for SD module??? Kindly throw some light regarding the same.
Sidhu

I am not sure about SAP SD Audit , but following info may help :--
01. Complete and correct master data
02. Complete and Correct Transcation data
03.Proper and logical processing
04. User administration and authorisation check
05.Tracking document changes
06.Detailed document analysis
07. Creating and changing GL accounts
08. Check balances , stock etc
09. Check Tax Code / VAT / Keys etc
10. Check Number ranges .
Thanks
Rajesh

How to migrate GR block stock (103) and its PO from SAP to SAP system

Hello All,
We are migrating from one SAP system to another . Our approach is to only migrate open POs and upload stock with initial entry. This works for POs with 101 movement type. However POs with Goods in transit - which usuallly follow the 103-105 cycle are causing an issue.
How would I migrate GR blocked stock i.e. if a PO has had only 103 mvt against it.
Thanks in advance.

Hi,
   If the invoice is not entered / paid, then the old PO should not be processed for any subsequent process and you have to do all the subsequent process based on the new PO in the new system. You may block the old PO item to avoid any mistake.
   If invoice is already entered and pending for payment, please check with your accounts department regarding the approach, since it will be critical from audit point of view. You may either cancel the invoice in the old system and create the same in the new; or continue with the payment in the old system and transfer the correct material valuation price from old system to new system and create free of cost PO for these items (only for already paid items) in the new system (since invoice is already paid).
   If you need the GR blocked stock, you have to create the transaction data!!. You may use any of the data upload tool to achieve the same!
Regards,
AKPT

System Audit

Dear All,
I must imagine an standard for system audit, for different SAP systems (4.6, 6.0, etc.)
This audit consist of a reports for: system measurements (system release, database system, etc.), user measurements (number of users an autorizations, expired users, etc.) and business measurements (nr. of materials created, number of order created - purchase order, sales order, production order, etc.).
Firs of all I must to create this standard and after this I must to find the SAP transaction to obtain the results.
Can you give me some documentation about such kind of standard? Or SAP transaction?
Thank you very much for your answers,
Marian

It depends on the scope and goal of your audit. For example: Just the network? Or network and servers and applications? Audit for security or audit for inventory, configuration standards etc.? How big a system (i.e. 5 devices or 5000 devices)? Is there an existing management system and known good archive of all configurations?
Depending on the answers to these, a wide variety of tools at varying costs can be used.

SAP User Audit Report

Hi Expert,
I want to download SAP user audit report through USMM.
but whenever i run USMM and click on system measurement its goes on background job.
I need this report in PDF format. plz help

Hi Kumar
1. Once you’re all system measurement are getting over collect those data in to one system.
Refer the PPT 's which provided the steps
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=4&cad=rja&uact=8&ved=0CC8QFjAD&url=https%3A%2F%2Fsupport.s…
2 Transaction code LAW perform a consolidation of user records and then send the information to SAP direct or email
SAP Library - License Administration Workbench
BR
SS

Archiving Information from "old" SAP systems and switch off the server

Good day
I hope someone can offer some advice. Our company has a few sites across the globe. Three of the sites in South Africa ( where I'm working at the moment ) had their own SAP systems. Three odd years ago, we implementeted a new SAP system, combining the separate SAP systems into the new one, running of the same box etc etc. The "old" SAP systems were still availbale after the new one went live, in the event that people want to look back at history.
We are you busy with a project where we are going to merge our current SAP implementation into our global SAP system... obviously only the current master data are going to be transfered to the new system. It's an idea time for us to clean up our data.
My question: Once we go live on our global SAP system, we want to "export" or archive from the 3 "old" SAP systems the Master Data from the HR module ( like employees who's left the company - it's law to keep the records for 5 years at least once a employee has left) , HSEC and FI modules into a single datastore... this way we don't have to keep the three servers running in the event that history is required. The servers wil be kept off-line and only switched back on if a detailed audit is required.
The global SAP system does not have an archive solution implemented to we can't access archived data from the new system...
So, we need to export master data from our 3 old SAP boxes into a Unicode type file system, and our local South African sites needs to be able to access the information using a text type editor or a web based interface we can run off our SAP Portal...
Thank you

Hello Cornelius,
To introduce myself, I am an active SDN/BPX member as well as an ASUG Archiving and Information Lifecycle Management Volunteer.
Decommissioning Legacy Systems (SAP and non-SAP systems) is quite the topic these days with divestitures becoming such a common occurrence.
Some things to think about in this situation are:
Identifying the data to be decommissioned:
what information would be needed for an audit
what information would be needed for a lawsuit situation
Identifying the access requirements to this data.
Identifying the retention policies for this data (this will be
driven by regulatory requirements, etc.).
If this has not already been done - define retention periods for this data - it will most likely have different retention periods based on the type of data.
You mention that you do not have an archive solution in place yet.
I would recommend that you may want to research that option because typical requirements for retaining legacy data is that it is stored in such a manner so that it is protected from any type of modification.
There are a lot of 3rd party archiving/storage solutions that provide this type of secure storage.
You are correct in that you will want to export or archive the legacy data as opposed to loading the data into your current system. It would probably involve a large increase in the size of your SAP database and you would probably run into number range overlaps.
But, if this data is exported to a filesystem, you will be losing the business logic associated with the data, and the information is no longer in its original format (this could have legal ramifications).
I would recommend using SAP Archiving functionality for this effort. If you are looking for outside resources, there are many vendors out there that have a lot of experience with these types of projects.
Two that come to mind are Dolphin IT and OpenText.
Or, depending on the timeline of your project, SAP is coming out with a tool that can be used for decommissioning SAP Systems. It is part of
their SAP ILM solution. It will be called Retention Warehouse. Here is a paragraph from their latest white paper describing this new tool:
With the retention warehouse, SAP now offers a
standardized method for system decommissioning in
answer to these pressing issues. It allows you to reuse the archived data outside the original system in a central
retention warehouse.
For more detail on this topic, the white paper can be found on the SAP ILM Website:
service.sap.com/ilm
This tool is part of a larger initiative from SAP to help customers with their ILM (Information Lifecycle Management) strategy. This tool is near and dear to me as I was fortunate enough to be part of an
ASUG Influence Council that helped with some of the requirements for this solution.
I hope this information is useful.
Good luck and Best Regards,
Karin Tillotson

Two different company in same SAP system ?

Dear Gurus,
I came across a requirement from Client
There is a company A which is having own business . This company A operates/manage company B (all panning/execution/sales purchase/inventory etc) but not in Books of account. From legal point of view company A is funding company B & generates profit/loss.
But practically company A manages all Business of Company B like a group company but from legal point of view it is a Third party in which company A has Investment . In management reporting they shows all the details of company B.
The reason of this kind of arrangement is govt licence.
In there current situation they have there own legacy system on which they manages this all things ( 2 different Data base ) & its legal .
Can this be mapped in same SAP System ( say as different company code or any other way ) ? ? How ?
Regards,
Ishwar

Dear Christian,
Actually I feel that may be that is possible by creating a new company code but i am more concern from Audit point of view
Auditor might have problem : why i am mapping some other (legal point of view ) company Transaction in my system ?
if anybudy has came across similar situation please guide
Ishwar

TSV_TNEW_PAGE_ALLOC_FAILED during run of SAP licence Audit

hello,
when trying to process the SAP License Audit transaction YSALSA on PSO with the full data amount a runtime error " TSV_TNEW_PAGE_ALLOC_FAILED" occurs.
I checked the runtime error and found the following.
The amount of storage space (in bytes) filled at termination time was:
Roll area...................... 2718352
Extended memory (EM)........... 2002743520
Assigned memory (HEAP)......... 1996993152
Short area..................... " "
Paging area.................... 131072
Maximum address space.......... 4294967295
These are the parameters set for memory
abap/heap_area_dia: 2000683008
abap/heap_area_nondia: 2000683008
abap/heap_area_total: 2000683008
it is a 64 bit HP-UX system.
I would like to know if there is any other solution rather than changing the memory parameters.
Thanks,
Rajiv

Hello,
Its a memory issue, In ST22 you can see how much memory was occupied and how much was requested.
Sometimes this could be due to other program or activites which have consumed larger parts of memory and other programs can not get there share. Have you tried at the times where there is less workload.
As suggested in other post, You can increase the memory accordingly.
Regards,
Vamshi.

SAP License Audit

Hi Friends,
If someone is familar to SAP License Audit, please give some suggestions about these questions.
questions here :
(1) I need to calculate active users in PRD system on all client ( 000, 001, 066, 900( our clinet ) ) or on only 900? How about QAS and DEV system?
(2) There is a SAP user ANKIT in PRD 900 & in 000 also. it is one license or two?
(3) We have also some communication user on 900 related to SOLMAN, BIW & other system. These will be calculated?
(4) What abt users on other syetm like BIW, SOLMAN ?
Thanks!
Ankit

This is a Forum for SAP Business One. Please mark this thread closed and post it to the appropriate Forum for replies.

Question about sap license audit,could you help me

how many users can my test system use ? Does SAP concern the users I used in test system ?
could you give me some information about that? thanks a lot.

Hi,
We have hundreds of user on our production system, and several developer user and have been go live several years ago (SAP R/3) and proceed license audit annualy.
Typically, license audit is calculated by the number of user on your production system and the number of developer user on your (development) system. Hence, the number of usual user (which is not developer user) on your test system should not be brought into SAP license audit calculation.
to proceed, first you have to clasify contractual user type via SU01, and then proceed it using USMM transaction.
hope it help you,
rgds,
Alfonsus Guritno

How can we make SAP system READ ONLY !!!!!

Hi, we have an SAP R/3 4.6 C Application. We need to take the system for read only state means we dont want the users to allow any update for the system but they should be able to view the data what they have created. Mean while we dont want the database to be taken in read only mode as we the administrators or the users might want to update their password information.
It would be a big help if some one can through some tips on how we achieve this.
Thanks much in advance.
Guru

Hi
Please make the database in READ ONLY MODE. This will help. If it is an oracle database then.
Open a Database in Read-Only Mode
You can open any database in read-only mode to prevent its data from being modified by user transactions. Read-only mode restricts database access to read-only transactions, which cannot write to the datafiles or to the redo log files.
Disk writes to other files, such as control files, operating system audit trails, trace files, and alert files, can continue in read-only mode. Temporary tablespaces for sort operations are not affected by the database being open in read-only mode. However, you cannot take permanent tablespaces offline while a database is open in read-only mode. Also, job queues are not available in read-only mode.
Read-only mode does not restrict database recovery or operations that change the database's state without generating redo data. For example, in read-only mode:
Datafiles can be taken offline and online
Offline datafiles and tablespaces can be recovered
The control file remains available for updates about the state of the database
One useful application of read-only mode is that standby databases can function as temporary reporting databases
Opening a Database in Read-Only Mode
Opening a database in read-only mode enables you to query an open database while eliminating any potential for online data content changes. While opening a database in read-only mode guarantees that datafile and redo log files are not written to, it does not restrict database recovery or operations that change the state of the database without generating redo. For example, you can take datafiles offline or bring them online since these operations do not effect data content.
If a query against a database in read-only mode uses temporary tablespace, for example to do disk sorts, then the issuer of the query must have a locally managed tablespace assigned as the default temporary tablespace. Otherwise, the query will fail. This is explained in "Creating a Locally Managed Temporary Tablespace".
Ideally, you open a database in read-only mode when you alternate a standby database between read-only and recovery mode. Be aware that these are mutually exclusive modes.
The following statement opens a database in read-only mode:
ALTER DATABASE OPEN READ ONLY;
You can also open a database in read-write mode as follows:
ALTER DATABASE OPEN READ WRITE;
However, read-write is the default mode.
Regards

SAP License Audit and DDIC user

Hello, we recently completed our first SAP License Audit and an issue came up with our DDIC user in the productive client. According to the SAP Licensing and Auditing documentation DDIC is not counted in clients 000 and 001, however we have DDIC in client 400 (our productive client) and I set it as a SAP Web AS User in the Contractual User Type. However, we should not have to pay for a standard SAP user and I was going to remove DDIC from client 400, but I see it's needed for transports.
How can I assign DDIC a user type that does not consume a SAP License?
- Regards,
Richard

Hi Richard,
You don't need to and should not remove DDIC and SAP* from your productive client.
As Nick mentioned already, please assign License type 'Test' to the standard users SAP*, DDIC etc in your productive client (400).
When the users are defined with 'TEST' license type, they will not be measured in System License Audit report.
Cheers !!
Satya.
PS: Points always encourage me to reply...

Error message 'Please log on to the SAP system' when selecting 'shop'

In SRM when we click on 'shop' or 'Goods Receipt' we get the error 'ITS System Information 'Please log on to the SAP System' where it prompts user to log on again. However when user logs on it opens up the same screen again saying please log on to the sap system.
This only happens when we shop using the External ITS (wgate), EBP works fine using the Internal ITS.
Please can someone help.
Kindest Regards
Paul

Hi
Please try this ->
Look using SRM transaction SITSPMON and RZ20, RZ21.
Also Please check SAP OSS Note 517860
-> For ITS, You need to maintain the RFC connection in the connection type "T" i.e TCP/IP. Maintain in the Table - TWPURLSVR.
Ensure that you have maintained correct entries in the TWPURLSVR table using SM30 transaction for the ITS Web path (http or https address path). Note you are passing port - 8001 in the address here. Incase you face problems, Please ask you BASIS person to help you out.
-> Please ask you BASIS person to help you out for maintaining ITS settings. (Ensure IACOR service is running properly - ITS server is running), through the transaction SMICM
-> What all logs appear in SLG1 and SM21 transactions after publishing all the Internet services.
-> If you are using ITS 6.2,you need to do the IACOR settings for SRM on the ITS server.Also in SE80 mainatin the Site for SRM system.After this ,you can publish all the ITS services usig the report,W3_PUBLISH SERVICES.
Related links ->
Integrated ITS :Login Problem
Re: ITS_CANT_LOAD_INCLUDE in BBPstart service
Re: ITS_DEST_NOT_FOUND
Re: ITS Configuration
Re: ITS Template not found
Do let me know.
Regards
- Atul

Couldn't log into SAP System (message 00264) after SAP_BASIS update

Hello,
we performed SAP_BASIS update to SAPKB70023 and get a problem with logon into a SAP system with message 00264 (Status &2 of the user interface &1 missing).
We have a 64-bit non-Unicode system on Solaris/SPARC/Oracle and Kernel level 333.
We tried to import MENUSYST program from note 1285869, but nothing happened at all. The parameter abap/unicode_check we set to "on" but this didn't help us.
So after selecting system record in SAP Logon now we get the initial logon screen with no "new password" button and error 00264 (Status 0020 of the user interface SAPMSYST missing.) and couldn't log into the system.
We have no idea why correct and existing statuses are not working.
Please suggest us what to do to fix this problem.
Thanks in advance!

Check this,
http://forums.sdn.sap.com/thread.jspa?threadID=835278
it may be useful.
Regards,
Ravi

Unable to Log-in *SAP System Message : Error while reading a Dynpro*

Hi,
We are facing issues while logging-in through SAP logon 710.
The system throws an error dialog box with the below message:
SAP System Message : Error while reading a Dynpro
At the OS level Java process server0 is in stop status with exit code -11113. In ABAP WP Table all processes are in wait status.

Hi Please find the contents of std_server.out below.
stdout/stderr redirect
node name : server0
pid : 4124
system name : KEC
system nr. : 01
started at : Mon Jul 27 15:44:57 2009
[Thr 5656] MtxInit: -2 0 0
CompilerOracle: exclude com/sapportals/portal/pb/layout/taglib/ContainerTag addIviewResources
CompilerOracle: exclude com/sap/engine/services/keystore/impl/security/CodeBasedSecurityConnector getApplicationDomain
CompilerOracle: exclude com/sap/engine/services/rmi_p4/P4StubSkeletonGenerator generateStub
CompilerOracle: exclude com/sapportals/portal/prt/util/StringUtils escapeToJS
CompilerOracle: exclude com/sapportals/portal/prt/core/broker/PortalServiceItem startServices
CompilerOracle: exclude com/sap/engine/services/webservices/server/deploy/WSConfigurationHandler downloadFile
CompilerOracle: exclude com/sapportals/portal/prt/jndisupport/util/AbstractHierarchicalContext lookup
CompilerOracle: exclude com/sapportals/portal/navigation/cache/CacheNavigationNode getAttributeValue
CompilerOracle: exclude com/sapportals/portal/navigation/TopLevelNavigationiView PrintNode
CompilerOracle: exclude com/sapportals/wcm/service/ice/wcm/ICEPropertiesCoder encode
CompilerOracle: exclude com/sap/lcr/pers/delta/importing/ObjectLoader loadObjects
CompilerOracle: exclude com/sap/engine/services/webservices/jaxrpc/encoding/InstanceBuilder readElement
CompilerOracle: exclude com/sap/engine/services/webservices/jaxrpc/encoding/InstanceBuilder readSequence
CompilerOracle: exclude com/sap/engine/services/webservices/jaxrpc/encoding/TypeMappingImpl initializeRelations
CompilerOracle: exclude com/sap/engine/services/webservices/jaxrpc/encoding/GeneratedComplexType _loadInto
SAP J2EE Engine Version 7.00 PatchLevel 110760.44 is starting...
Loading: LogManager ... 250 ms.
Loading: PoolManager ... 0 ms.
Loading: ApplicationThreadManager ... 47 ms.
Loading: ThreadManager ... 16 ms.
Loading: IpVerificationManager ... 0 ms.
Loading: ClassLoaderManager ... 16 ms.
Loading: ClusterManager ... 93 ms.
Loading: LockingManager ... 32 ms.
Loading: ConfigurationManager ... 1032 ms.
Loading: LicensingManager ... 0 ms.
Loading: CacheManager ... 93 ms.
Loading: ServiceManager ...
Loading services.:
Service runtimeinfo started. (16 ms).
Service cross started. (31 ms).
Service file started. (31 ms).
Service memory started. (31 ms).
Service timeout started. (16 ms).
Service trex.service started. (32 ms).
Service userstore started. (0 ms).
Service jmx_notification started. (15 ms).
Service p4 started. (62 ms).
Service classpath_resolver started. (16 ms).
Service deploy started. (3722 ms).
Service MigrationService started. (31 ms).
Service bimmrdeployer started. (0 ms).
Service log_configurator started. (5177 ms).
Service locking started. (0 ms).
Service http started. (126 ms).
Service naming started. (157 ms).
Service failover started. (16 ms).
Service appclient started. (31 ms).
Service javamail started. (47 ms).
Service ts started. (47 ms).
Service jmsconnector started. (47 ms).
Service licensing started. (15 ms).
Service connector started. (93 ms).
Service iiop started. (94 ms).
Service configuration started. (16 ms).
Service webservices started. (265 ms).
Service dbpool started. (1204 ms).
Service UT started. (0 ms).
Jul 27, 2009 3:45:09 PM com.sap.security.core.persistence [SAPEngine_System_Thread[impl:5]_54] Fatal: Initialization of ABAP data source (com.sap.security.core.persistence.datasource.imp.R3Persistence) failed: " Error while reading a dynpro ". This message is critical if it appears during the startup of the AS Java.
Jul 27, 2009 3:45:09 PM ...re.server.ume.service.UMEServiceFrame [SAPEngine_System_Thread[impl:5]_54] Fatal:
service com.sap.security.core.ume.service ================= ERROR =================
Core service com.sap.security.core.ume.service failed. J2EE Engine cannot be started.
com.sap.engine.frame.ServiceException: Start of UME service failed. Check help topic "Start of UME Service Failed". Technical details: Error while reading a dynpro
 at com.sap.security.core.server.ume.service.UMEServiceFrame.start(UMEServiceFrame.java:398)
 at com.sap.engine.frame.ApplicationFrameAdaptor.start(ApplicationFrameAdaptor.java:31)
 at com.sap.engine.core.service630.container.ServiceRunner.startApplicationServiceFrame(ServiceRunner.java:214)
 at com.sap.engine.core.service630.container.ServiceRunner.run(ServiceRunner.java:144)
 at com.sap.engine.frame.core.thread.Task.run(Task.java:64)
 at com.sap.engine.core.thread.impl5.SingleThread.execute(SingleThread.java:81)
 at com.sap.engine.core.thread.impl5.SingleThread.run(SingleThread.java:152)
Caused by: com.sap.security.core.persistence.datasource.PersistenceException: Error while reading a dynpro
 at com.sap.security.core.persistence.datasource.imp.R3PersistenceBase.newPersistenceException(R3PersistenceBase.java:236)
 at com.sap.security.core.persistence.datasource.imp.R3PersistenceBase.init(R3PersistenceBase.java:491)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactoryInstance.<init>(PrincipalDatabagFactoryInstance.java:446)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactory.newInstance(PrincipalDatabagFactory.java:164)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactory.getInstance(PrincipalDatabagFactory.java:117)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactory.getInstance(PrincipalDatabagFactory.java:63)
 at com.sap.security.core.InternalUMFactory.initializeUME(InternalUMFactory.java:221)
 at com.sap.security.core.server.ume.service.UMEServiceFrame.start(UMEServiceFrame.java:287)
 ... 6 more
com.sap.engine.frame.ServiceException: Start of UME service failed. Check help topic "Start of UME Service Failed". Technical details: Error while reading a dynpro
 at com.sap.security.core.server.ume.service.UMEServiceFrame.start(UMEServiceFrame.java:398)
 at com.sap.engine.frame.ApplicationFrameAdaptor.start(ApplicationFrameAdaptor.java:31)
 at com.sap.engine.core.service630.container.ServiceRunner.startApplicationServiceFrame(ServiceRunner.java:214)
 at com.sap.engine.core.service630.container.ServiceRunner.run(ServiceRunner.java:144)
 at com.sap.engine.frame.core.thread.Task.run(Task.java:64)
 at com.sap.engine.core.thread.impl5.SingleThread.execute(SingleThread.java:81)
 at com.sap.engine.core.thread.impl5.SingleThread.run(SingleThread.java:152)
Caused by: com.sap.security.core.persistence.datasource.PersistenceException: Error while reading a dynpro
 at com.sap.security.core.persistence.datasource.imp.R3PersistenceBase.newPersistenceException(R3PersistenceBase.java:236)
 at com.sap.security.core.persistence.datasource.imp.R3PersistenceBase.init(R3PersistenceBase.java:491)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactoryInstance.<init>(PrincipalDatabagFactoryInstance.java:446)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactory.newInstance(PrincipalDatabagFactory.java:164)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactory.getInstance(PrincipalDatabagFactory.java:117)
 at com.sap.security.core.persistence.imp.PrincipalDatabagFactory.getInstance(PrincipalDatabagFactory.java:63)
 at com.sap.security.core.InternalUMFactory.initializeUME(InternalUMFactory.java:221)
 at com.sap.security.core.server.ume.service.UMEServiceFrame.start(UMEServiceFrame.java:287)
 ... 6 more
[Framework -> criticalShutdown] Core service com.sap.security.core.ume.service failed. J2EE Engine cannot be started.
Jul 27, 2009 3:45:09 PM com.sap.engine.core.Framework [SAPEngine_System_Thread[impl:5]_54] Fatal: Critical shutdown was invoked. Reason is: Core service com.sap.security.core.ume.service failed. J2EE Engine cannot be started.

SAP SYSTEM AUDIT

Similar Messages

Maybe you are looking for