Diff between SAP* and DDIC

[pradeepmathewch]

Hi all,

Whats the difference between SAP* and DDIC though both have the same SAP_ALL profile ?

Thanks and Regards, Pradeep

[Former Member · Accepted solution]

SAP* and DDIC both are super users.

But only one difference between them is

DDIC user can logon when the SAP system is in upgrade status,where as no other client can login during that period.

Thanks,

Hari

[Former Member]

Hi Pradeep,

SAP - description (SAP system super user) - clients(000, 001, 066,all new clients).

DDIC - ABAP Dictionary and software logistics super user -clients(000, 001)

U have one more thing called as

EARLYWATCH - Dialog user for the Early Watch service in client 066.

Hope tihs helps u,

Regards,

Nagarajan.

[Former Member]

Hi,

The two special users in the SAP System are as follows:

The SAP System superuser, SAP*

SAP* is the only user in the SAP System that does not require a user master record, but that is instead defined in the system code itself. SAP* has by default the password PASS, as well as unlimited system access authorizations.

When you install your SAP System, a user master record is defined for SAP* with the initial password 06071992 in Clients 000 and 001. The presence of a SAP* user master record deactivates the special properties of SAP*. It has only the password and the authorizations that are specified for it in the user master record.

To secure SAP* against misuse, you should at least change its password from the standard PASS. For security reasons, SAP recommends that you deactivate SAP* and define your own superuser.

The maintenance user for the ABAP Dictionary and software logistics, user DDIC.

The user master record for user DDIC is automatically created in clients 000 and 001 when you install your SAP System. The default password for this user is 19920706. The system code allows user DDIC special privileges for certain operations. For example, DDIC is the only user that is allowed to log on to the SAP System during an upgrade.

To secure DDIC against unauthorized use, you must change the initial password for the user in clients 000 and 001 in your R/3 System.

Anand.M

[former_member185954]

DDIC - has special authorizations for accessing files on filesystem, that's the reason all SYSTEM CLEANUP jobs in SAP System are scheduled via DDIC.

SAP* - is a superuser usefull for setting up the system and client after installation, it is also a backdoor entry to SAP just in case everyone is locked.

The SAP* is locked generally after usage is over.

Regards,

Siddhesh

[pradeepmathewch]

Hi,

Well, what you wanted to say is it makes the difference of who uses it ?

thanks and Regards, Pradeep

[Former Member]

Hi Pradeep,

Yes it differs with users.

For more information regarding this do check on to this,this will help u understanding better.THis is good one yaar.

http://help.sap.com/saphelp_erp2005/helpdata/en/52/671785439b11d1896f0000e8322d00/frameset.htm

http://help.sap.com/saphelp_erp2005/helpdata/en/3e/cdaccbedc411d3a6510000e835363f/frameset.htm

Hope this helps u,

Regards,

Nagarajan.

PS:Reward points if its of use.