Hierarchy
SAP_BASIS (Software Component) SAP Basis Component⤷
BC-SEC-SNC (Application Component) Secure Network Communications⤷
SECN (Package) SNC Secure Network Communication
IMG Activity
| ID | SIMG_BCSNC_USRACLEXT | Maintain extended access control list of user |
| Transaction Code | S_BIN_67000006 | IMG-Aktivität: SIMG_BCSNC_USRACLEXT |
| Created on | 19981204 | |
| Customizing Attributes | SIMG_BCSNC_USRACLEXT | Maintain extended access control list of user |
| Customizing Activity | SIMG_BCSNC_USRACLEXT | Maintain extended access control list of user |
Document
| Document Class | SIMG | Hypertext: Object Class - Class to which a document belongs. |
| Document Name | SIMG_BCSNC_USRACLEXT |
Define the extended assignment between SNC-names and SAP users.
There exist some scenarios where the simple assingement is not sufficent. Every SAP user can only belong to one SNC-name. In case of shared userids like the SAP standard users SAP*, SAPCPIC, DDIC and EARLYWATCH you need multiple assignments.
You can enter a "*" for the user or the SNC-name to allow everybody to work but in this case the access control list is degenerated:
Userid SNC-name Conclusion
defined * Everybody can work with this SAP user.
* defined This master user can work with all SAP users.
* * No access control at all
The extended SNC information for the user is entered using transaction SM30 with table USRACLEXT.
Example
Requirements
Standard settings
Recommendation
Don't use *-entries. They can lead to a security leak.
Activities
1. Choose the entry you wish to modify or choose New Entries.
2. On the following screen, enter the data:
- SNC-name
3. The canonical SNC-name will be calculated if SNC is active.
Further notes
Business Attributes
| ASAP Roadmap ID | 209 | Establish Authorization Management |
| Mandatory / Optional | 2 | Optional activity |
| Critical / Non-Critical | 2 | Non-critical |
| Country-Dependency | A | Valid for all countries |
Assigned Application Components
| Documentation Object Class | Documentation Object Name | Current line number | Application Component | Application Component Name |
|---|---|---|---|---|
| SIMG | SIMG_BCSNC_USRACLEXT | 0 | HLB0100170 | Secure Network Communications |
Maintenance Objects
| Maintenance object type | C | Customizing Object |
| Assigned objects | ||||||
|---|---|---|---|---|---|---|
| Customizing Object | Object Type | Transaction Code | Sub-object | Do not Summarize | Skip Subset Dialog Box | Description for multiple selections |
| USRACLEXT | S - Table (with text table) | SM30 | USRACLEXT |
History
| Last changed by/on | SAP | 20010921 |
| SAP Release Created in |
