System: User Management Settings

Definition

System configuration settings about the management of the SAP CC users and credential information about other SAP users

• Description
• Setting up or viewing system parameters of this group

Description

This group includes all the system parameters that relate to the user management technical features in SAP Convergent Charging:

• SAP CC users (advanced password management, user sessions, user isolation)
• other necessary SAP user information (logon and password) that the SAP CC Core Server system uses to connect to different systems (SLD, back-end database)

SAP User Management
SAP CC Users	SAP Users
User password management: PASSWORD_MANAGEMENT_ENABLED User session management: USER_SESSION_ENABLED User isolation management: USER_ISOLATION_ENABLED User operation auditing: AUDIT_ACTIVATION See also: Security Concepts: User Administration and Authentication in the SAP CC Security Guide System Configuration: Core Server Configuration of the Technical Features in the SAP CC Configuration Guide Procedures: Creating and Managing SAP CC Users in SAP CC Core Tool	User for SLD: SLD_USER Users for back-end database: SQLHELPER_LOGIN

See also:

• Authorizations in the SAP CC Security Guide

Setting Up or Viewing System Parameters

You can set up or view the following system parameters that are available for different instance types in the running SAP CC Core Server system.

Parameter		Definition
AUDIT_ACTIVATION		The enablement or disablement of the User Operation Auditing feature to conform to the required security and auditing level
PASSWORD_HASH_ROUNDS_FOR_INDIVIDUAL_USERS		The number of hash rounds applied to password hashing for an individual user
PASSWORD_HASH_ROUNDS_FOR_SERVICE_USERS		The number of hash rounds applied to password hashing for a service user
PASSWORD_MANAGEMENT_CHANGE_DELAY		The minimum number of days between two password modifications
PASSWORD_MANAGEMENT_COMPLEXITY		The password complexity rules
PASSWORD_MANAGEMENT_ENABLED		The advanced password management policy activated or not
PASSWORD_MANAGEMENT_EXPIRATION_DELAY		The number of days after which a password expires and must be changed
PASSWORD_MANAGEMENT_FAIL_LIMIT		The number of successive failed logon attempts before a user is locked
PASSWORD_MANAGEMENT_MAX_IDLE_DELAY		The number of days from which a user who has not logged in the system is locked
PASSWORD_MANAGEMENT_MINIMUM_LENGTH		The minimum length for a password
PASSWORD_MANAGEMENT_REUSE_CYCLE		The number of password modifications that must occur before a password can be reused
PASSWORD_MANAGEMENT_REUSE_DELAY		The number of days before a password can be reused
SLD_PASSWORD		The password used to submit the payload to the System Landscape Directory
SLD_USER		The user identifier used to submit the payload to the System Landscape Directory
SQLHELPER_LOGIN		The logon used to connect to the Core Database system
SQLHELPER_PASSWORD		The password used to connect to the Core Database system
USER_ISOLATION_ENABLED		The enablement or disablement of the isolation between service and individual users
USER_SESSION_ENABLED		The enablement or disablement of the user session management and concurrent edition management
USER_SESSION_SESSION_LIMIT_PER_USER_AND_TOOL		The limit of user sessions per user and user interface
USER_SESSION_VALIDITY_PERIOD		The validity period of user sessions (in seconds)