AGLEA Blog

There are cases in which the management of 10.000 SAP users is done by two or three people (maybe not full-time).

Other similar or smaller cases where a team of 15 full-time people fail to meet the demands.

How is it possible? Let’s try to analyze what could be the causes and also possible solutions.

From 2025 (SAP has moved in early 2020 the sap ecc support term date to 2027 instead of 2025) SAP's support for the SAP ECC (ERP Central Component) product will end.

It is therefore important to prepare in time for migration to HANA and S/4HANA.

But what are HANA and S/4HANA and what impacts are there with SAP security?

In some situations it might be useful to have a role or profile that only allows the data display.

It is available in SAP something that could answer this request? Is there a SAP_ALL profile for each SAP application component?

Sometimes it is necessary to intervene in the Production System to correct an extremely urgent problem. That is to perform an action which is not normally done.

What are we supposed to do in these situations? Do we really need specific tools or we can carry out what is required in a safe and secure way?   

Have you replaced the database with SAP HANA? There are several new Security features to activate! 

Enable all features for SAP HANA Security! Follow the tips to protect data and ensure database compliance. 

Data retrieval is normal in a management system. But what are the tools available in a SAP ERP system? Is it correct reporting in a transactional system? 

What are the security impacts in doing corporate data reporting in SAP and how can they be mitigated? What is the SAP query survival manual? 

Currently, there is no one-size-fits-all solution to address all the issues required by the GDPR.

SAP proposes different systems, see what they are and what they are used for. SAP offers different systems: what are those and what are they for?

Having within the company’s awareness also on the part of SAP developments is certainly important. Especially in order not to be dependent on third parties even for simple problems.

We don’t talk about ABAP developers directly. But what are or could be the impacts in having an internal group of developers for the security aspects. 

Is it better, regarding the SAP security, to have an internal or external development team? 

Is it possible to customize passwords for categories of users? Where and how are passwords managed in SAP? 

How can these aspects be checked during an audit?