Course Goals:

• Explaining the elements, strategies, and tools of the SAP authorization concept
• Creating and assigning authorizations using the Profile Generator
• Using the Central User Administration (CUA) tool
• Identify and protect sensitive data and mechanisms in live solutions based on SAP Web AS
• Use the SAP Audit Information System to structure and conduct thorough security checks and configure important security monitoring mechanisms
• Configure standard SAP role maintenance tools to produce secure company-specific roles and authorization profiles
• Secure change management mechanisms in production system landscapes and protect system administration tools from misuse
• Raise awareness about security topics
• Improve security in a SAP system environment

Target Audience:

• SAP system administrators, professional security auditors, project team members
• Employees responsible for technical system security

Prerequisites:

• Knowledge of information technology

Course Content:

• Introduction to SAP NetWeaver
• Navigation in SAP systems
• SAP Web Application Server architecture
• Overview of the SAP development environment
• Communication and integration technology
• Introduction to SAP system administration
• Starting and stopping a SAP system
• System configuration options
• Configuration of the online documentation
• Configuration of periodic automated work with a database, for example, scheduling backups
• Transport functions in SAP systems
  Importing support packages and add-ons
• Scheduling background jobs
• Definition and integration of printers
• Setting up remote connections
• Using system monitors
• Fundamentals of SAP document archiving
• Structured error searches
• Fundamentals of system security
• Introduction
• Elements of the SAP authorization concept
• User master record
• Working with the Profile Generator (roles, composite roles, reference roles, derived roles, customizing roles)
• Profile Generator: Installation and upgrade
• Access control and user administration (password rules, special users, user and authorization administration)
• Special authorization components, use of area menus
• Transport of authorization components
• Central User Administration (CUA)
• Integration into organizational management, including a demonstration (without structural autorization in HR)
• Configuring and using the SAP Audit Information System
• Configuring and using the auditing, logging, and tracing tools provided by SAP
• Monitoring and protecting accesses and transactions, tables, and programs
• Configuring secure role and authorization maintenance
• Securing the change management process
• Secure system administration
• Critical authorizations, authorization combinations, and authorization groups
• Network basics
• Security in the SAP system
• Cryptography basics, PKI, TCS
• SAP Web AS, SAP ITS, and SAP Enterprise Portal
• Logon tickets, X.509, SSL, PAS
• Collaboration and network security