SAP* user security

[#1]

Hi,

To secure SAP * user , parameter login/no_automatic_user_sapstar is set to 1.

Additionally,do i still need to delete its authorizations or delete user SAP* in all clients including client 000?

What can be consequence if I remove this user?

Thanks & Regards,

Uppdeep

[Peter]

Hi Uppdeep

I recommend you do the following to protect SAP*:

• Create SAP*
• Lock SAP*
• Add SAP* to User Group SUPER
• Set valid-to-date to the past
• Remove authorization (no roles or profiles)

The above steps has to be done in all clients (including 000).

To verify the protection you should run Tcode RSUSR003 to check the protection of SAP* and other standard users across all clients in the system.

Best regards,

Peter