Skip to content

Latest commit

 

History

History
268 lines (148 loc) · 6.27 KB

File metadata and controls

268 lines (148 loc) · 6.27 KB

Display Technical Users

This app shows all technical users that exist in the system.

This app has two tabs:

  • Technical User

  • SAP Support User Request Log

In the Technical User tab, you can display technical users that can be services that are used to automate technical tasks in the system, for example, a print queue user who pulls print jobs remotely. In addition, the service and support users of the software provider or hosting provider are technical users.

In the SAP Support User Request Log tab, you can display more information about when and why SAP support users accessed your customer system in the past 12 months. For each support user, the relevant incident ID, access level, access category, customer user, request date and validity date is displayed when you click on the required entry in the Users list. SAP support user IDs are pseudonymized to respect the data subject rights of SAP employees according to GDPR.

You can use this app to:

  • Lock or unlock the following types of technical users: Print users and communication users

  • Change the user name and password of some types of technical users

  • Display details of which support users were created for the system

  • Display all technical users in the system

  • Export user data (such as User ID or User Group) to a spreadsheet if required

Note:

To lock and unlock communication users, use the Maintain Communication Users app. See section Related Information.

All users are assigned to one of the following user groups:

User Groups

Group

Explanation

SAP Technical Users

These users are predefined by SAP to run tasks in the system for cloud operation activities and automated processes. SAP technical users are also required for customer-specific tasks, such as running and scheduling jobs. The required job template contains the SAP technical user needed to run the job by default.

Communication Users

In this group, all communication users used in communication arrangements that are managed by customers are displayed.

Communication users are technical users required for communication between your system and any integrated system. The following types of communication users are available:

  • SAP communication users: Predefined by SAP

  • Communication users: Created by customers

    Custom communication users are created in the Maintain Communication Users app and are assigned to systems for inbound and outbound communication. These technical users either use basic authentication or certificates to communicate between your system and the integrated system. The communication system, together with a communication scenario, is assigned to a communication arrangement. Thus, all communication scenario roles are assigned to the communication user which provides this user with all permission required for the connection between your system and the integrated system.

Support Users

SAP uses support users to provide customers with support if issues occur in the system. These users only exist temporarily and are deleted by SAP after the support process is completed.

  • Desktop

  • Tablet

Group

Explanation

SAP*

This user has always been used in on-premise systems to log on to newly created tenants. This user is locked in your tenant and it'sn't used for any system operation.

SAP_CUST_BUS

This user is a reference user assigned to all customer business users and SAP support users. General authorizations required for basic system access are assigned through this reference (for example to access SAP Fiori launchpad). The user can't be used by itself. It's locked and has no logon credentials.

SAP_LMADM

This user is used for system internal, automated software lifecycle management across all tenants. It's used in processes that need to update tenant-specific data after changes to tenant-independent data. This user is unlocked. External system logon isn't possible.

SAP_SMTP_IN

This user is used as the SMTP mail server user.

SAP_SPC

This user is used for SAP-internal automated system operation.

SAP_SYSTEM

This user is the default user to run system-internal technical jobs.

SAP_WFRT

This user is used by SAP Business Workflow for the automated background processing of work items.

SAP_WSRT

This user is used for system internal processing in the Web service runtime.

If you need support or experience issues, please report an incident under component BC-SRV-APS-IAM.

Related Information

Business Catalogs for IAM Administration Apps

Maintain Communication Users

Access Levels

Access Categories