EWA: SAP_ALL minimum of users
We are working with the Early Watch app; whithin the security points that still need to fix we found the following message:
Users with authorization profile SAP_ALL have full access to the system. There should be a minimum of such users. The number of users with this authorization profile is stated for each client.
Currently there are few people working with SAP_ALL (incluiding the user used by the Basis consultant)
Where is defined the minimum of users that can use SAP_ALL profile for client?
You should not assign this authorization profile to any of your users.
SAP_ALL is very critical and only SAP* contains SAP_ALL attached to it in the production system.