Adjustment of the filter configuration to the customer system
Define Tasks and Systems
In addition to the consultants working in the individual SAP modules, there is a subarea here that is not directly apparent to many and whose activities seem to be quite opaque: SAP Basis. The smooth operation of SAP systems as the heart of many companies is ensured by the work of SAP Basis administrators.
A Conflict Resolution Transport (CRT) is used only for add-ons, such as IS-IS or IS-OIL. It is used to eliminate conflicts that may arise between the different support packages and an add-on. Note that a CRT that applies to an add-on release also resolves all conflicts with previous releases of that add-on. In addition, a CRT may include other corrections for the corresponding add-on. A CRT can therefore always be a special add-on support package. Settings for SPAM With Additional Settings, you can access a dialogue box where you can specify general settings for the SAP Patch Manager (SPAM). These settings affect the behaviour of downloading and loading support packages of the different types equally. SPAM updates are an exception; certain settings are specified for these. You can toggle the following properties on and off: Transmission Monitor If you enable the Transmission Monitor, you can monitor the download of the support packages from the SAPNet - R/3 frontend with a graphical monitor. Otherwise, you will only get a progress bar. Scenario Choosing the scenario determines which actions should be performed while the Support Packages are being played in. The default scenario is used to fully deploy support packages; All steps are performed. The test scenario allows you to determine whether a modification match is required or whether conflicts occur that should be resolved before the support packages are loaded. The test scenario does not import data and objects into your SAP system. There is no test scenario for SPAM updates. The choice is ignored when a SPAM update is introduced. Rebuild data files You can specify whether the data files from the EPS packages will be reunzipped each time you try to play. In principle, this is the case.
Personalisation of role in PFCG / user in SU01
The SAP Security for Administrators training block covers the basics of security when using SAP systems. Participants receive training in basic security measures in the form of prevention and monitoring.
Especially in larger companies, which also have multiple locations in different countries, it is often necessary to grant different employees the same permissions for different levels of organisation, such as accounting circles. In order to make maintenance and maintenance of the system easy in such a situation, it is useful to set the inheritance principle for SAP permissions. How does SAP Permissions Inheritance work? An inheritance is always about a master object passing certain properties to a derived (sub) object. Therefore, these properties do not need to be maintained several times. Also, changes to the master object are passed directly to the derived objects. This allows easier maintenance and drastically minimises the error rate. In the case of SAP Permission Inheritance, the required permissions are bundled in a Upper or Master role. Only the organisational levels have to be maintained in the roles derived from them. The permissions are automatically pulled from the master role. Create Inheritance for SAP Permissions The following shows how to create and use inheritances for SAP permissions. This requires only two steps: Creating a master role and defining derived roles. Step 1: Create a master role Inheritance always requires a parent role, because all properties are inherited from it. If this role, in which all shared permissions are bundled, is missing, the first step is to create this master role. To do this, open the PFCG transaction and enter the desired name of the master role in the Name field. It is possible to identify master and derived roles by using naming conventions. The "Single Role" button will then be used to create the desired role. In the following example I create the master role "findepartment_r".
With "Shortcut for SAP Systems" a tool is available that greatly facilitates some tasks in the SAP basis.
For this reason, I will regularly record recurring tasks from the SAP basis Administration for you in simple tutorials.
Option 2: Logging-based approach An alternative to the restrictive procedure is the logging-based approach.