05-12-2010 3:10 PM
Does anybody have some official documentation about creating user ID in special clients (000, 001 and 066)?
Is it practicable? or is it preferable accessing with special users like DDIC or SAP*?
Thank you all!
05-12-2010 4:00 PM
HI,
Go through this
http://help.sap.com/saphelp_nw70/helpdata/en/52/671785439b11d1896f0000e8322d00/content.htm
Its not recommended to use DDIC and SAP* in normal scenarios.
You should create a copy of DDIC to work in 000 client or with limited auth as per requirement.
Same is true for other clients as well.
Regards,
05-13-2010 5:15 AM
Hi
You can create user ids in standard clients(000, 001, 066) for BASIS team, Security team and team handling the administration activities of the system. Probabely S_A.SYSTEM can be assigned to these users.
Any other user requesting access should have proper business justification and access requirement should be teamporary.
Login through user ids DDIC and SAP* user Ids should be prohibited.
Thanks.
Anjan
05-13-2010 3:07 PM
Andreia - What I heard from conferences and even at our landscape, only Basis Admins have login's none of SAP default power accounts are used to maintain accountability.
On demand sometime BA's are given access through RFC to compare configurations but even for them authorizations are only given as needed for limited time.
S_A.System power admin profile, so you may want to see if this should be really assigned to IT support user.
Thanks.
05-13-2010 7:05 PM
Hi,
U can use Client copy (SCC4) in this case.
Client-copy makes a complete copy of the source client so u can make a copy and create a user Id in this which will be used for various activites in ur team.
For doing this u willl need these superusers SAP* and DDIC
It is a mandatory to create any client from 000 as this client has all the SAP Standard config, etc that is needed in a new client.
Thanks
05-19-2010 9:36 AM
Hi
As nothing much is being done in 066 client, so recommendation would be to assign profile "S_USER_ALL" rather than "S_A.SYSTEM" in this client.
Thanks.
Anjan
05-19-2010 9:49 AM
in times of the Solution Manager you won't need a user anymore in 066.
b.rgds, Bernhard