6\VWHP $GPLQLVWUDWLRQ 0DGH (DV\

Chapter 11: Security AdministrationAudit TasksAll users who have left the company should have their R/3 access terminated immediately.By locking or deleting these user IDs, you limit access to only those users who should haveaccess to R/3. Periodic review assures that the task of locking or deleting has beencompleted.Proper audit control requires that a user who no longer has a valid business need to accessR/3 should not be allowed to do so.Deleting or locking these user IDs also prevents anyone who had been using the terminateduser ID from accessing the system with that ID.One of the audit procedures that your external auditors will use is to test whether a personwho does not need to access R/3 has a live user ID.1. In the Command field, enter transaction SU01 and choose Enter(or from the SAP standard menu, choose Tools → Administration → User maintenance → SU01-Users).2. Choose .2System Administration Made Easy11–57