Before you can work with the database, you must log on using a database tool or via an interface. When you log on, you identify yourself with a user name and authenticate your identity with the corresponding password (authentication). After authentication, you can, within the scope of the authorizations assigned to you, access and work with data in the database.
The database system differentiates between the following types of users:
DBM operators who can manage databases
Database users who can change data in the database
Standard Users
Default User Name |
Default Password |
Description |
---|---|---|
DBADMIN DBA |
SECRET DBA |
Database system administrator Database system administrator up to and including version 7.5 |
DBM DBM |
SECRET DBM |
First DBM operator with all DBM server authorizations |
User Name |
Description |
---|---|
SUPERDBA |
Database system administrator |
CONTROL |
DBM operator with all server authorizations |
SAPR3 |
In older SAP systems: Database administrator (database user of class DBA) |
SAP <SAPSID> |
In newer SAP systems, in particular in MCOD systems (Multiple Components One Database): Database administrator for the SAP system with the ID <SAPSID> (database user of class DBA) |
SAP <SAPSID> DB |
In Java EE systems: Database administrator for the SAP system with the ID <SAPSID> (database user of class DBA) |
Managing Users
When creating a database you create the database system administrator, the first DBM operator and, depending on the system, further standard users. Some naming restrictions apply as described in Conventions for User Names and Passwords.
You can use CCMS, Database Studio, Database Manager CLI or a query tool to manage users.
Database Administration in CCMS, User Data
Database Studio, Managing Users: Overview
Database Manager CLI, Managing Database Manager Operators
SQL Reference Manual, Authorization
SAP MaxDB Security Guide, User Administration and Authentication, Authorizations
SAP note 1542818
Simplified Logon Process Using XUSER
To simplify the logon process to databases with command line tools, you can save the logon data (user name and password, database name) in a user key using the XUSER program. The data can only be accessed by the operating system user who owns the data.
When you want to connect to the database, you only need to specify your user key.
SAP systems use XUSER for the authorization of work processes. Exception: SAP liveCache systems that use central authorization.
More information:
Where Are the Users Stored?
The database system administrator and the DBM operators are stored in the UPC (user profile container).
More information: Configuration Files
Special Operating System Users
To protect database resources from direct access using operating system commands, special operating system users and groups are available.
More information: Special Operating System Users and Groups