SAP Basis

ADM100 Lesson: Security in the SAP Environment
Figure 185: Users and Clients
Explain to the participants that, in addition to SAP system users, there
are also database users and operating system users. Depending on the
database, database users have their own standard passwords, which
should be changed after installing an SAP system. Operating system users
do not have standard passwords to be changes, since they are only created
with the installation of the SAP system.
There is also the standard user SAPCPIC in client 000 (of the type
Communication) with the standard password ADMIN.
Caution: As an operating system user of a particular user group, it
is,forexample,possiblewithOracletologontothedatabaseas
an administrator as internal without a password. In this case,
it is possible to delete the entry for the user “SAP*” for a client
from the relevant control table (USR02), to then log on to the SAP
system with the “SAP*” user stored in the kernel and the familiar
standard password. The parameter login/no_automatic_user_sapstar
exists for this reason.
You should also explain that the client 001 no longer exists as of SAP R/3
4.6C. Client 001 is, of course, still available for existing systems that have
been upgraded for an older release status.
Client 000 cannot be changed and is used as a template for customer
clients. Client 001 was previously intended for production work. However,
most customers use a different client, such as client 100.
2003/Q3 © 2003 SAP AG. All rights reserved. 587