Personnel Management (PA)

About This Chapter

This section of the Security Guide provides an overview of security-relevant information for Personnel Management (PA).

References to Cross Chapters

The following aspects relevant to security apply to SAP ERP Central Component (SAP ECC) or Human Resources overall and thus also to Personnel Management:

  • Before You Start

    This section provides an overview of the Security Guides that are based on the SAP ERP Central Component Security Guide and of the most important security-relevant SAP Notes for SAP ECC.

  • User Administration and Authentication

    This section provides an overview of the most important user administration and authentication aspects:

    • User Management (Human Resources)

      This section contains information about the user management tools and the user types required for SAP Human Resources.

    • User Administration (SAP ECC)

      This section contains information about the user administration tools, the user types required for SAP ECC, and the standard users provided by SAP ECC.

    • User Data Synchronization

      This section provides you with an overview of the user synchronization strategy if multiple components or products are included.

    • Integration into Single Sign-On Environments

      This section provides an overview of the Single Sign-On mechanisms (SSO mechanisms) supported by SAP ECC.

  • Session Security Protection

    This section contains information about the activation of the secure session management that prevents JavaScript or plug-ins from accessing the SAP logon ticket or security session cookies.

  • Network and Communication Security

  • Data Storage Security

    This section provides an overview of the critical data used by SAP ECC, as well as the security mechanisms to be used.

  • Enterprise Services Security

    This section provides an overview of the security aspects of the enterprise services provided with SAP ECC.

  • Security-Relevant Logging and Tracing

    This section provides an overview of the trace and log files that contain security-relevant information and that enable you to reproduce activities, for example, if there is a security violation.

  • Services in Lifecycle Management for Security

    This section provides an overview of the services that SAP Active Global Support provides to help you retain continuous security in your SAP systems.

Overview of the Main Sections of This Chapter

The following sections contain the security-relevant information that is specific to Personnel Management:

  • Important SAP Notes

    This section lists the most important SAP Notes for the security of Personnel Management.

  • Authorizations

    This section provides an overview of the authorization concept used for Personnel Management.

  • Communication Channel Security

    This section provides an overview of the communication paths used by Personnel Management and provides information on how you can best protect them.

  • Communication Destinations

    This section provides an overview of the communication destination for the components of Personnel Management and the country-specific components of Personnel Administration.

  • Data Storage Security

    This section provides an overview of the critical data used by Personnel Management, as well as the security mechanisms used.

  • Security for Additional Applications

    This section contains information about temporary sequential (TemSe) data storage, which only temporarily stores data from country-specific reports from Personnel Administration.

  • Other Security-Relevant Information

    This section contains information about security-relevant Customizing for infotype records and indicates the reports that perform database statistics and consistency checks without checking the user's authorizations.

  • Chapter with the security-relevant information for the component HCM Processes and Forms