How do I check that SAPCPIC isn't in use?

[Former Member]

Hello,

I'm rather new to SAP. I'm doing SAP Security audit and found that the password for SAPCPIC isn't changed. There is no documentation on whether this user is used for any communication or not.

How do I check that SAPCPIC is not in use?

[Former Member]

Hi Pavel,

u can  check in tcode - STAD (usually have 48 hr logs) and ST03N  - take help from basis team.

if you have configured SM19 Audit Log for this user then you can check logs and get details on if this user is used for any communication.

Regards,

Satyajit

[Former Member]

There are three methods: 1, To check last logon date in SUIM. 2. SM20 log report 3. Execute report RSUSR003 and observe User status locked or not.

[former_member187565]

Hi Paval,

Let us know which SAP version you are using. As from release 4.0 the SAP basis does not use the SAPCPIC anymore in standard, which is clearly mentioned in SAP Note 29276.

So there is no problem in changing user SAPCPIC default password "ADMIN" as per your requirement. But before changing the password just closely check in your system is there any RFC used this user for login, also check if there any z-program used this user. Anyhow after changing the password monitor the system closely to see any impact.

Regards,

Rafikul

[Former Member]

I would prefer to check the system first to understand whether there is an impact or not. I can easily check RFC connections, but how do I check which z-program may use this ID?