SolMan - the Solution Manager takes over the monitoring of the system status and enables central application management
Cooperation with internal support
All the roles that contain the string "ADM" are considered critical, as they usually refer to administrative roles. When identifying critical SAP permissions, profiles and roles, it should be noted that SAP does propose a concept for names, but this is not always taken into account by applications or its own developments.
If you get a tp-step in the cancel message, it is a transport order-independent step whose logs cannot be displayed with logs. In this case, analyse the following files: tp-Step 6: P
tp-Step N: N tp-Step S: DS All protocols are located in /usr/sap/trans/log.
Provision of the services and basics
The basis of every SAP system is the SAP NetWeaver Application Server. Everything depends on this "SAP Basis" to keep SAP systems running. In the area of SAP Basis Operations, we handle all technical tasks for our customers that arise during the installation, operation and maintenance of SAP systems. We install, administer, configure, troubleshoot and optimize your SAP system.
An important area of SAP Security is the analysis of the customer's own SAP programs, which are classically written in the proprietary SAP language ABAP. Here, too, as in all programming languages, security vulnerabilities can be programmed - whether consciously or unconsciously. However, the patterns of security vulnerabilities in ABAP code differ from those in Java stacks or Windows programs. The goal of these conventional programs is usually to either crash the program (buffer overflow) or to artificially execute the program's own code (code injection). Both is not possible in ABAP, since a crash of a process causes nothing else than the creation of an entry in the log database (Dump ST22) and a subsequent termination of the report with return to the menu starting point. So a direct manipulation as in other high level languages or servers is not possible. However, there are other manipulation possibilities.
Tools such as "Shortcut for SAP Systems" complement missing functions in the SAP basis area.
That is, it identifies the resources that are available and that can be used and the resources that need to be developed.
If the selection set contains composite roles, the comparison takes place for all single roles contained in it.