Setting Access Privileges for SAP System Directories Under Windows

For security reasons, the SAP system and user data is stored in a special directory structure in the operating system. The SAP system and user data is protected with defined access authorizations.

For more information about how the SAP system directory structure is established in the Windows file system, see the installation guide for the respective SAP system at http://service.sap.com/instguides Information published on SAP site .

We recommend that you apply the file and directory access privileges as shown in the table below.

Local Based Installation (saploc and sapmnt share)
SAP Directory or Files	Local User Groups	Permissions
\`<usr>`\`<sap>`	SAP_<SID>_LocalAdmin	Full Control
\`<usr>`\`<sap>`\`<trans>`	SAP_<SID>_LocalAdmin	Full Control
\`<usr>`\`<sap>`\`<SID>`\`<sys>`\`<global>`\`<security>`	SAP_<SID>_LocalAdmin	Full Control + deny all for Administrators group

Domain Based Installation (saploc and sapmnt share)
SAP Directory or Files	Domain User Group	Permissions
\`<usr>`\`<sap>`	SAP_<SID>_GlobalAdmin	Full Control
\`<usr>`\`<sap>`\`<trans>`	SAP_<SID>_GlobalAdmin	Full Control
\`<usr>`\`<sap>`\`<SID>`\`<sys>`\`<global>`\`<security>`	SAP_<SID>_GlobalAdmin	Full Control + deny all for Administrators group