User Administration

User administration in SAP Collection and Disbursement ( SAP PSCD ) uses the mechanisms provided with the SAP NetWeaver Application Server for ABAP , for example tools, user types, and password policies. For an overview of how these mechanisms affect SAP Collection and Disbursement ( PSCD ), see the sections below. In addition, we provide a list of the standard users required for operating SAP Collection and Disbursement ( PSCD ).

User Administration Tools

The following table shows the user administration tools of SAP Collection and Disbursement ( SAP PSCD ) .

User Administration Tools

Tool	Description
User maintenance for ABAP-based systems (transaction SU01)	For more information about the authorization objects provided by SAP Collection and Disbursement ( PSCD ), see the section Authorizations in this document.
Role maintenance with the profile generator for ABAP-based systems (PFCG)	For more information about the roles provided by SAP Collection and Disbursement ( PSCD ), see the section Authorizations in this document.
Central User Administration (CUA)	Used for the maintenance of multiple ABAP-based systems
User Management Engine ( UME )	Administration console for maintenance of users, roles, and authorizations in Java-based systems and in the Enterprise Portal. The UME also provides persistence options, such as ABAP Engine.

User Types

It is often necessary to create different security concepts for different types of users. For example, your concept requires that individual interactive users must change their password regularly, but users for background processing must not.

The user types needed for SAP Collection and Disbursement ( SAP PSCD ) include, for example:

Individual users:
- Dialog users are used for SAP GUI for Windows or RFC connections.
- Internet users: The same concepts apply as for dialog users, but they are used for internet connections.
Technical users
- Service users are dialog users that have a large group of anonymous users available to them (for example, for anonymous system access using an ITS service).
- Communication users are used for dialog-free communication between systems.
- Background users are implemented in background processing.

For more information on these users types, see the security guide for SAP NetWeaver AS ABAP under User Types .

Standard Users

The following table shows the standard users required for SAP Collection and Disbursement ( SAP PSCD ).

System	User ID	Type	Password	Description
SAP NetWeaver Application Server	<sapsid>adm	SAP system administrator	Mandatory	SAP NetWeaver Installation Guide
	SAP Service <sapsid>	Service Administrator SAP system	Mandatory	SAP NetWeaver Installation Guide
SAP NetWeaver Application Server	SAP Standard ABAP users ( SAP *, DDIC , EARLYWATCH, SAPCPIC)	see SAP NetWeaver Security Guide	see SAP NetWeaver Security Guide	service.sap.com/securityguide SAPNetWeaver Security Guide Security Guides for theSAPNetWeaver Products SAPWeb Application Server Security Guide SAPWeb AS Security Guide for ABAP Technology User Authentication Protecting Standard Users This user is also implemented in applications that use Web Dynpro under ABAP.
SAP NetWeaver Application Server	SAP Standard SAP NetWeaver Application Server Java users	see SAP NetWeaver Security Guide	See SAP NetWeaver Security Guide	service.sap.com/securityguide NetWeaver Security Guide Security Guides forSAPNetWeaver According to Usage Types Security Guide for Usage Type AS SAPNetWeaver Application Server Java Security Guide User Administration and Standard Users These users can be used, for instance, in applications that use Web Dynpro under Java.
SAP ECC	SAP users	Dialog users	Mandatory	The number of users depends on the application area and the business data to be processed.

For more information about standard users in SAP NetWeaver, see the SAP Help Portal at Start of the navigation path help.sap.com Next navigation step SAPNetWeaver Release xx/Language SAPNetWeaver Library SAPNetWeaver by Key Capability Security Identity Management User and Role Administration of AS ABAP Configuration of User and Role Administration First Installation Procedure Logon and Password Security in the ABAP System End of the navigation path .

The users specified are delivered with SAP Collection and Disbursement ( SAP PSCD ).

Recommendation

We recommend that you change the user IDs and passwords for users that are automatically created during installation.

End of the recommendation.