topic sap* password in Application Development and Automation Discussions

sap* password

Former Member — Thu, 17 Feb 2005 03:18:55 GMT

could you pls tellme what is the password for SAP* user.

ambichan.

Re: sap* password

Former Member — Thu, 17 Feb 2005 03:25:47 GMT

... you might have better chances getting that from your sap basis administrator.

ryan.

Re: sap* password

Former Member — Thu, 17 Feb 2005 05:56:11 GMT

Hello Ambichan,

SAP* is the superuser in the SAP R/3 System. This is the only user in R/3 system that does not require a user-master record, as it is defined in the system-coding (i.e., it is hard-coded).

The default password for this user could be either PASS or 06071992. But since this is password is very widely known, this user can be misused and therefore a user-master record is specifically created in all the clients of an SAP R/3 system for this user-ID. After this is done, the hard-coding will be over-ridden by the user-master record.

It is also recommended that all the autohorizations for this user be revoked immediately following certain primary administation tasks for the SAP Authorization. Moreover, SAP recommends never to use SAP* as the superuser. Instead a new user-ID should be created with the profile SAP_ALL for that purpose.

Hope this helps,

Regards,

Anand Mandalika.

Re: sap* password

Former Member — Mon, 14 Mar 2005 22:06:06 GMT

Hi,

check out reports RSUSR0*. I don't have a system at hand, but there should only be two hits or so.

One of them lists users with critical authorizations and reports obvious security holes. Among others, SAP* with default password will be reported if it has the default password in any client of the instance.

Cheers,

Thorsten