User Management of the Application Server Java

The user management engine (UME) provides the user management functions for Java applications on SAP NetWeaver Application Server (AS) Java.

Use the following tools for user administration on the AS Java:

Recommendation

We recommend that you use identity management.

If you manage users across multiple SAP systems and even non-SAP systems, we recommend you use SAP NetWeaver Identity Management Identity Center.

End of the recommendation.

The data source used by the UME imposes some restrictions on identity management. See the information relevant for your data source:

The table below lists user management tasks that you perform when required.

Tasks on Demand for User Management
Task	Description
Activating the Emergency User	Use the emergency user if all administrator users are locked or you cannot log on to any applications because of problems with the system configuration.
Checking the Consistency of Entries in the UME Database	Perform this task if you suspect the data in the UME database is no longer consistent.
Creating a Technical User	Applications sometimes require a technical user, whose password does not expire or does not need to log on.
Exporting User Management Data	Perform this task when you need to transfer users to another AS Java or in preparation for a mass update of user management data.
Importing User Management Data	Perform this task to import users to your system or to perform a mass update of your user management data.
Logging and Tracing	Use the logs and traces to monitor the status of your system.
Maintaining the User's Certificate Information	Perform this task if you use certificates for user authentication.
Managing Resources	Perform this task to restrict user access to specific security-sensitive parts of the AS Java.
Mapping Users and Groups	Perform this task to map J2EE security roles to users or groups.
Monitoring the Performance of the UME Cache	Perform this task to check if your cache settings indicate an impact on system performance.

The table below lists user management tasks that you perform on a regular basis.

Periodic Tasks for User Management
Frequency	Task	More Information
Daily	Approving or Rejecting Users	Requires the configuration of companies and self-registration.
Daily	Assigning Principals to Roles or Groups	Perform this task to assign authorizations.
Daily	Locking and Unlocking Users	Perform this task when users enter the wrong password. Note You can enable users to unlock their own passwords. End of the note.
Daily	Managing Users, Groups, and Roles	Perform this task to create, edit, and delete users, groups, and roles.

If you have SAP NetWeaver Portal in your installation, you must also manage portal roles.

For more information, see User Management.