What is the Administrator id that shows in UME?

[Former Member]

Does anyone know or have documentation on what the "Administrator" id shown in UME is? Who would use it and what is it for? Can it be removed?

(We are being asked by Auditors.)

We are on GRC 5.3 SP13.

Thanks.

[Former Member]

Hi

The Administrator userid is created as part of installation contains full access, never try to delete it, it does not has any choice to create like SAP*

[Former Member]

Would it cause problems if we periodically changed the password, or locked the id?

Thanks.

[sunny_pahuja2]

Hi,

You should not change its password because this user uses in the configtool to connect to UME. If you will change its password then you have to change this in config tool as well otherwise system would not start. Also, please don't lock it.

Generally, this user is Technical user in portal so that its password does not expire.

Thanks

Sunny

[Former Member]

If it changed periodically in UME, if you dont change in configtool, it may lead communication failure UME with other NetWeaver components

[simon_persin4]

Hi,

I agree that the ID should remain and that it should not be locked. However, you should try to ensure that the controls around it's password are robust otherwise you open your system to the potential risk hat the back door is left open for anyone who knows the default passwords.

I would suggest changing the default password and keeping it secret from all but those users who really need it. You will have to make sure that you update the config tools to prevent system connectivity issues.

As with standard SAP power users, you do need them, but you also have to control them where possible.

Simon

[Former Member]

Hi,

This is a very interesting SAP Note: 1296696 - GRC UME user password gets expired after some time.

Cheers,

Diego.

[sunny_pahuja2]

Hi,

Administrator user id is the super user. You should not remove this user id. But access to this user id should be restricted as it is super user.

Thanks

Sunny