cancel
Showing results for 
Search instead for 
Did you mean: 

About users with profile SAP_ALL

mizuhashi
Discoverer
0 Kudos
292

Dear experts

The EWA report points out the number of users with profile [SAP_ALL].
There are three challenges to solving this problem.

1.
Is it correct that having the profile SAP_ALL is not recommended? Should it not be allowed to have even if it reduces the number of users to a minimum?

2.
The EWA report shows the number of active users as 34. I specified SAP_ALL and S_A.system in table UST04. The output result is 26.
What is the difference?

3.
According to SAP Note 2894909, it will be fixed in release version 01V* of component ST-A/PI.
This environment is 01V_731(sp0002).
Please tell us how to solve it.

Best Regards

Sandra_Rossi
Active Contributor
0 Kudos
All users having SAP_ALL means no security at all in your system... Guess the answer to question 1.
Sandra_Rossi
Active Contributor
0 Kudos
Question 3: the note 2894909 only applies from 01S_640 to 01U_731 (https://me.sap.com/notes/2894909/E). Contact the SAP support if you feel that there's still a bug in 01V.
Sandra_Rossi
Active Contributor
0 Kudos
I feel that 26 or 34 users with SAP_ALL is way too much. Only keep it to 1 user but activate this user only when there's a big problem. See this note/blog post: https://me.sap.com/notes/2548064/E. You may ask Frank B. in the discussion.
S_Sriram
Active Contributor
0 Kudos
Hello for question 2, you can use the transaction SUIM to identify the SAP_All user IDs in your system and compare with EWA.

Accepted Solutions (0)

Answers (1)

Answers (1)

mizuhashi
Discoverer
0 Kudos

Dear Sandra_Rossi

Not assigned to all users. Assigned only to a limited number of users.
Should users with profile SAP_ALL be zero?
We would appreciate it if you could also answer questions 2 and 3.