Week 1

• Introduction and User Administration
• Introduction
• SAP LANDSCAPE and Architecture
• User Administration
• User Creation
• Maintaining User Groups
• Maintaining System Parameters
• Mass user creation procedures
• User Monitoring
• Securing SAP Standard Users (SAP*/DDIC/SAPCPIC)

     User Administration Tasks

• Creation of users using SU01
• Different Types of Users
  
  • Dialog Users
    
  • Service Users
    
  • System Users
    
  • Communication Users
    
  • Reference Users
    
• Password resets
  
• Locking and Unlocking the users
  
• Setting the expiration Date on the validity of the id’s and their roles
  
• Mass creation of users
  
• User Monitoring

     User Groups and System Parameters

• Purpose of User Grps
  
• Authorization Objects driving User Grps
  
• Defining Password and other Parameters in RZ10
  

Week 2

• Role Administration
• Single Roles
• Composite Roles
• Derived Roles

     Role Administration

• Introduction to Role Concept
  
• Creation of Single Roles
  
• Creation of Composite Roles/Job Functions
  
• Derived roles concept
  
• Uploading and Downloading of roles
  
• Creation of Roles from profiles (Without any t-codes in the menu)

Week 3

• Authorization Groups
  
• Creation of custom auth objects
  
• Transport of Authorization Components
  
• Troubleshooting Authorization Failures
  
• Introduction and concepts Central user administration (CUA)
  
• Security Audit Information System

     Authorization Object and Transports

• Introduction to Authorization object
• Maintaining the Authorization objects in SU24
• Maintaining authorization objects in roles
• Manual insertion of auth objects in a role
• Creation of Custom objects in Su21
• Concepts of Authorization Check in ABAP programs
• Authorizations for Transports Release and Import
• Transports the roles from Dev-QA-PRD
• Authorization to Release and Import Transports

     Trouble shooting Authorization Failures

• Usage of SU53 screen shot
• Usage of ST01 trace
• Different options to fix the authorization failures
• Role changes
• New role assignment to user master record
• Role change approval process
• SOD’s and Audit Approval process 

     CUA and Audit (SOD/SOX)

• What is CUA
• Advantages of CUA in SAP
• Setting up of CUA
• Setting Up Field Distribution Parameters in CUA
• Distribution Logs in SU01
• Defining Segregation of Duties
• Tools used for SOD rules

Week 4

• Authorization in BW Security
• Authorizations in CRM
• Assignment of Profiles to the users in CRM
• Usage of SUIM reports
• Usage of AGR and Security related tables in SE16
• Setting up jobs for PFUD/User Comparison in the clients
• Security tips and tricks for Interview preparation

     BW Security & CRM Security

• Difference b/w R/3 and BW security
• Introduction to Info Areas and Info Cubes
• Different types BI roles
  • End User (Reporting Roles)
  • Query Designer Role
  • BI Admin Role
• Usage of RSECADMIN t-code in BI
• Authorization Concept in CRM
• Different Auth objects used in CRM to restrict the Transaction
• Creation of Profiles and Assignment of Profiles to users