AGLEA Blog

Did you know that there are "special" SAP users whose credentials are known, public?

This is not an SAP oversight; it is something known and familiar. Especially in the initial setup processes of the system, utilities are activated that should be secured immediately thereafter. But what are they and what should you do?

In this series of articles we discuss the "tip" of the day. That is, real cases of requests received in counseling. 

Today we discuss "is it worth using user parameters to manage permissions?" What are the advantages and disadvantages?

In the day-to-day these terms are often used as synonyms , but they're actually not

They can be confused and often it's not clear whether it's correct to talk about SAP profiles or roles. Let's try to underline the differences between these two terms, by starting from the past!

Which are the tables of the SAP GRC Access Control product useful to know (out of the existing 2500)?

For some SE16 may be an unknown acronym. For others it is the "bread and butter." It is a SAP transaction remarkably familiar to administrators. And often not only them, unfortunately.

But what is it used for? How many versions of it are there? How do you use it and what are the risks involved?

We discuss  it in this article!

Did you ever hear about it? What does it do?

How does it work and what are the attention points of this tool?

What does it mean? Do you have a uniform model to manage SAP Security or for each project you have to do it from scratch, wishing that it will be at least similar to the one already done, maybe from others in the past?

Let's discover in this article if the centralized management SAP Security is better or worse. Are there one or multiple orchestra directors?

It's always more common to see hybrid sceneries, meaning On-premise and on cloud systems. Or just on cloud.

In these systems too, obviously, it's necessary to activate these policies used in on-premise systems.

But what accesses should you supply? Especially to who still isn't part of this organization?

RFC means Remote Function Call and it's the SAP standard interface that make the systems communicate between eachother.

Failing to configure this aspect can expose the system to a series of security problems. There are multiple aspects to keep in mind. In this article we will talk about how to protect the system from RFC calls made from third party systems or from other SAP systems.

What does GxP mean? Why is it done in SAP?

What are the semplifications that can reduce the maintenance cost of these aspects?