Restrictive Basis Transactions

List of sensitive and restrictive basis transactions with descriptions of their functionality.

Risk to changing Logical System definitions and usage within client configuration

BD54 : Maintain Logical Systems

BDLS : Convert Logical System Names
 

Risks to changes of OS commands and OS 

OS02 : Operating System Configuration

OS03 : Operating System Parameter Changes

OS04 : Local System Configuration

OS05 : Remote System Configuration
 

Risks to Administer the System Parameters on the system (auditors look at these)

RZ04 : Maintain SAP Instances

RZ10 : Maintain Profile Parameters

RZ11 : Profile Parameter Maintenance
 

Risks to changing system/environment settings and connections

SAINT : Add-On Installation Tool

SCC4 : Client Administration

SCOT : SAPConnect Administration
 

Risk to activate/execute services

SICF : HTTP Service Hierarchy Maintenance
 

Change licensing data pertaining to contracts and functionality ($$ impact with SAP when audited)

SLICENSE : SAP Licenses Administration
 

Risk to locking tcodes used for processes/sending messages to all system users/removing required locks for PERNR Objects

SM01 : Lock Transactions

SM02 : System Messages

SM12 : Display & Delete Locks
 

Notes:

It is recommended that you work with your Basis and Tech Teams to identify the requests for access to any technical transaction and work together to ensure any access is granted with any assumed risks.

SAP Basis

Read also:
Creating a Customized SAP Main Menu

SAP Basis Reference Books:
SAP Basis Components, System Administration, Security, ALE and iDoc Books

Back to Basis Menu:
SAP BC (Basis Components) Hints and Tips

Return to :-
SAP ABAP/4 Programming, Basis Administration, Configuration Hints and Tips

(c) www.gotothings.com All material on this site is Copyright.
Every effort is made to ensure the content integrity.  Information used on this site is at your own risk.
All product names are trademarks of their respective companies.  The site www.gotothings.com is in no way affiliated with SAP AG.
Any unauthorised copying or mirroring is prohibited.