sidadm User Id rights

[Former Member]

Hi,

We have the ECC 6.0 on wondows server(SID S6D). We are planning to restrict user id permissions. Our s6dadm is in administrator group. Can we remove the same from admin group and assign to power user groups?

Or can we give some rights to s6dadm id so we can remove from admin group.

The installation is domain installation and DB is oracle(10g).

Thanks in advance.

Regards,

Rahul.

[JPReyes · Accepted solution]

Hi Rahul,

<sid>adm and SAPservice<sid> should belong to the local admin group as stated in the installation guide.

Regards

Juan

[chico_zhu]

The best answer was brought up by a customer asking SAP support whether it is still true. After all these years, SAPservice<SID> shall not be put into administrator/local admin group.

See more information from

Note 2273782-Alternative users to operate an SAP system

Note 1837765 - Security policies for <SID>adm and SAPService<SID> on Windows

[chico_zhu]

A review and update in kba 1837765 is in process. Please check the latest version only.

[Former Member]

Hi Rahul,

It is not recommended to remove <sid>adm and SAPservice<sid> from the local admin group, you can apply restricitions to users through some policies ( Eg: Group Policy Editing this can be applied to whole group ) on the domain. Your system administrator can help you in this regard.

Regards,

Anil Kumar CH

[Former Member]

Hi Rahul,

It's not advicable. Please don't remove.

Cheers

Deepanshu

[Former Member]

Dear Rahul,

Do not remove any admin rights / Groups from SIDADM user.

It will lead to many issues . As it is a domain installation , SIDADM user must have domain admin

privileges .

Regards,

Nibu