User Administration on SAP Web AS Java 

Getting Started

The administrator user created during installation depends on the data source used by the User Management Engine (UME). To find out which administrator user you can use to log on, see Standard Users.

The User Management Engine (UME) provides the user management functions for Java applications. To familiarize yourself with the UME, see User Management Engine.

Authorizations to use Java applications are either provided by J2EE security roles or by UME actions. To familiarize yourself with the concepts involved, see Architecture of Security Roles, Security Roles, and Permissions, Actions, and UME Roles.

Tools

You can use the following tools for user administration on the SAP Web AS Java:

·        User Management Engine (UME) administration console

·        Security Provider service of the Visual Administrator

Although you can create and modify users both in the UMEadministration console and in the Visual Administrator, we recommend that you use the UME administration console.

Tasks on Demand

The table below shows tasks that you need to perform when required:

Reason	Task	More Information
Activate the emergency user (SAP*)	Activate the emergency user.	Use the emergency user if all administrator users are locked or you cannot log on to any applications because of incorrect configuration.
Create, modify, or delete a user	Administrate users using the UME administration console.	None
Lock or unlock users	Lock or unlock users using the UME administration console.	None
Assign users to groups or UME roles	Assign users to groups or UME roles using the UME administration console.	None
Import or export user management data	Import or export users, groups, and UME roles using the UME administration console.	Use this function for mass operations.
Create UME roles and assign actions to UME roles	Create UME roles and assign actions using the UME administration console.	Use UME roles to assign authorizations to users or groups.
Map J2EE security roles to users or groups	Map J2EE security roles to users or groups using the Visual Administrator.
Manage resources	Manage resources using the Visual Administrator.	This allows you to allow or restrict user access to specific security-sensitive parts of the server.

Periodic Tasks

The table below shows tasks that you need to perform periodically:

Frequency	Task	Recommended Tool
Daily	Approve or reject newly registered users	UME administration console. This function is only available if you have set up user management accordingly. See Companies and Self-Registration with Approval.

 

See also:

If you have an Enterprise Portal in your installation, you also have to manage portal roles. For more information on portal roles, see:

·        Creating and Changing Roles and Worksets

·        Role and User Distribution to the SAP System

·        Upload of Roles from ABAP-Based Systems