Content Preview:

SAP BASIS and Security Administration~SAP BASIS addresses all security issues by incorporating an authorization module. With increased potential for security breaches in the computer systems around the world, BASIS consultants face a tough task of maintaining the integrity and administering the security of SAP systems. Interoperability features of a SAP system makes this task a bit more difficult.

2.0 SAP Security Components
The Big Picture SAP security in an integrated environment can be viewed in the form of discrete components as shown below (figure 1).

Tight security is required for each of the above components (Network,
Workstation, Operating System and Database) as a breach made in one area can compromise the entire system. The scope of this article is SAP Application Security, which can be achieved with the help of SAP’s BASIS security application through the concept of authorization.
In SAP, security is administered for objects (profiles and authorizations). Users are only authorized to see or change the parts of the system required by their respective job responsibilities.

2.1 SAP Authorization Concept
The SAP authorization concept is based upon the logical relationship between a user ID and the range of system authorizations with which it can be associated. The architecture of the authorization system is based upon the utilization of several individuals but related logical components: Profiles, Objects, Fields, and Authorizations. The user ID refers exclusively to profiles. Each profile grants a set of specific system access authorizations to user. Figure 2 illustrates the hierarchical authorization concept in SAP…. Think of wholesalers and distributors, SAP and Oracle, AT&T and BT..

Download SAP BASIS and Security Administration.Pdf:
[smartads]
Download file