This course provides skills training on the SAP R/3 Basis technology basics and R/3 Security concepts.

Objective

Upon completion, the participant will gain knowledge of the R/3 client/server architecture. The participant will also have valuable hands-on experience in R/3 security administration.

Minimum Prerequisites

Participants must have a basic knowledge of the LAN technology and knowledge of operating systems. It is recommended that the participants should have attended the SAP R/3 Basis Administration course or equivalent. Basic understanding and knowledge of PC operation and Windows use is required.

Included Labs

As per the training manual

What will you learn?

Introduction to ERP and SAP

TADM10-1: SAP Web AS Implementation and Operation I

• Introduction to SAP.
• Overview of ERP and SAP - SAP Terminology
• Introducing frequently used SAP terminology.
• Logging in to a SAP system
• SAP logon process for Windows
• Basic SAP Navigation - the basic SAP screen components, moving between menus, T-code   searches and other commonly used functions.
• End User Customization - customizing some SAP screens. Using T-codes – View user   information, logged in users, user creation, sending messages, technical and functional modules.
• Various SAP functional modules, log off from SAP system - SAP logoff process for Windows,   SAP services, co-operative business scenarios, mySAP.com
• Enterprise Structure

ADM940 - SAP Authorization Concept

Objective:

• Learn about the elements, strategies, and tools of the SAP authorization concept
• Create and assign authorizations using the Profile Generator
• Use the Central User Administration (CUA) tool

Course Content

• Introduction
• Elements of the SAP authorization concept
• User master record
• Using the Profile Generator (roles, composite roles, reference roles, derived roles, Customizing   roles)
• Profile Generator: installations and upgrades
• Access control and user administration (password rules, special users, user and authorization   administration)
• Analysis and monitoring functions
• Special authorization components, use of area menus
• Transport of authorization components
• Central User Administration (CUA) Integration with organizational management, with reference to   an example (without structural authorization in HR)

ADM950 - Secure SAP System Management

Objective:

After attending this course, you can:

• Identify and protect sensitive data in production systems
• Configure the Audit Information System for a system security audit
• Configure important security monitoring and tracing mechanisms
• Use the Audit Information System to conduct a thorough system security audit
• Explain use of the standard SAP role maintenance tools to produce company-specific, security-   enhanced roles and authorization profiles
• Secure transaction access, table access, program execution, and developer access
• Secure change management mechanisms in productive system landscapes
• Secure system administration tools against misuse

Course content

• mySAP System Security Goals and Methods
    - SAP services provided for security
    - Role maintenance tool
• Configuring and Using the Audit Information System
    - Purpose and history of AIS
    - Configuration of AIS for system audits
• Configuring and Using Basis Security Audit Tools
    - Configuration of the Audit Log
    - Reading the Audit Log
    - Using the Audit Log with CCMS Security Alerts
• Controlling Transaction Codes, Tables, Programs
    - Auditing the protection of transaction code execution
    - Auditing the protection of direct table access 
    - Auditing the protection of direct program execution
    - Auditing the protection of developer access
• Controls and Logs
    - Application, Webflow, Table Logs
    - Change Documents, Transport, and Authorization logs
• Customizing Role Maintenance Utilities
    - Auditing the use of role maintenance tool
• Securing User and Group Administration
    - User Information System for Audits
    - Decentralized security approaches
    - Trace tools for users that can be used to support audits
    - Auditing standard SAP users
    - Auditing user related security parameters
• Change Management and Security
    - SAP recommended system landscape
    - Approval processes for change management