DB users in SAP environment

[tomislav_bobanovic]

Hi,

please if someone can tell me official SAP recommendation regarding creating users on DB level.

I know that is not recommended and also breaking licensing policy regarding to SAP note 581312, but I can not find any official documnet from SAP with recommendations for users on DB level.

Thanks in advance

Tomislav

[Former Member · Accepted solution]

Hi Tomislav,

Licensing says - You should not have non-standard users for database management but you can have nonstandard users for database administration.

Since SAP application use it's own mechanism to interact with database using a schema owner, it is not recommended to have additional (non-standard) database management users.

If requirement is just for database administration, then you can have non-standard users with defined roles.

Regards,

Nick Loy

[tomislav_bobanovic · Accepted solution]

Hi Nick,

thanks for your fast answer and as I said before, this is familiar to me, but I can not find any official document or notice from SAP with recommendation about DB users, except note 581312, which is related to licensing.

If you have some, please send the link.

BR

Tomislav

[former_member188883 · Accepted solution]

Hi Tomislav,

You may connect with SAP account manager for this or create an OSS message to get clarification.

Regards,

Deepak Kori

[Former Member · Accepted solution]

Hi Tomislav,

Note clearly says:

As of point 3, it follows that direct access to the Oracle database is only allowed for tools from the areas of system administration and monitoring. If other software is used, the following actions, among other things, are therefore forbidden at database level:

• Creating database users
• Creating database segments
• Querying/changing/creating data in the database
• Using ODBC or other SAP external access methods

This means that additional application software is only allowed if this accesses the database through SAP interfaces, such as:

• RFC
• BAPI
• SAP J2EE
• ABAP using secondary database connections/DB Multiconnect (DBCO)
• ABAP using database links

So you should not use any other user/mechanism to manage your SAP database.

Only for monitoring and administration, it is allowed.

Explain your exact requirement, if you still have any query.

Regards,

Nick Loy

[tomislav_bobanovic · Accepted solution]

Hi Nick,

Thank you very much for your detailed answer.

Exact requirement is that one of my customers wants to have direct access to DB and I was looking for official SAP document which I should give them with explanation that it is not allowed.

Regards,

Tomislav.

[former_member188883]

Hi Tomislav,

Are you looking for recommendations for creating DB admin users not related to SAP application ?

As for users related to SAP application, it is created during the installation procedure itself and it is as per SAP standards.

Regards,

Deepak Kori