Activating SAP* User in Visual Admin in SAP
Use:
In critical situations where you configured user management incorrectly and may not be able to log on to any applications, or all administrator users are locked, you'll activate the emergency user SAP* to permit you to log on to applications, especially the configuration tools, and alter the configuration. The SAP* user has full administrator authorizations. For security reasons, the SAP* user doesn't have a default password, so you want to specify a password once you activate the user.
Procedure
1. Activate the SAP* user:
a. Start the config tool for editing UME
properties as described in Editing UME Properties.
Editing UME Setting:
1. Start the Config Tool by executing
\j2ee\configtool\configtool.bat.
2. within the tree, navigate to Global server configuration services com.sap.security.core.ume.service.
The list of UME properties appears.
¡ To change the value of a property:
i. Select the property in the list.
ii. In Value at rock bottom of the screen, enter the new value that you simply want to assign to the property.
iii. Choose Set.
iv. Choose (Apply changes).
To restore a property to its default value:
i. Select the property in the list.
ii. Choose Restore to default.
iii. Choose (Apply changes).
To restore all properties to their default values:
i. Choose Restore all to default.
3. Restart the nodes in the cluster for the changes to take effect.
b. Set the following properties:
Property Value Comment
ume.superadmin.activated true This activates the SAP* user.
ume.superadmin.password
Enter any password of your choice. This defines the password for the SAP* user.
c. Restart the Java application server.
The SAP* user is now activated. While it's activated, all other users are deactivated. You can only log on
with the SAP* user.
2. Fix your configuration as needed , logging on with the user ID SAP*and the password you specified.
For example, to go online to the Visual Administrator to unlock users or create a replacement administrator user,
proceed as follows:
i. Start the Visual Administrator by executing \j2ee\admin\go.bat.
ii. If you've got not already done so, you've got to make a replacement connection entry during which you specify SAP* because the user name.
For more information, see Creating a replacement Connection Entry.
iii. within the hook up with SAP J2EE Engine dialog, select the connection entry you created and choose Connect.
iv. Enter the password you laid out in the UMEproperties and choose Connect.
v. Do whatever is important to repair your configuration. For example, unlock all administrator users.
Similarly, you'll log on to the UME administration console using the SAP* user.
3. once you have fixed your configuration, deactivate the SAP* user again.
a. Start the config tool inorder to edit UME properties as described in Editing UME Properties section.
b. Set the property ume.superadmin activated to false.
b. Restart the Java application server.
Use:
In critical situations where you configured user management incorrectly and may not be able to log on to any applications, or all administrator users are locked, you'll activate the emergency user SAP* to permit you to log on to applications, especially the configuration tools, and alter the configuration. The SAP* user has full administrator authorizations. For security reasons, the SAP* user doesn't have a default password, so you want to specify a password once you activate the user.
Procedure
1. Activate the SAP* user:
a. Start the config tool for editing UME
properties as described in Editing UME Properties.
Editing UME Setting:
1. Start the Config Tool by executing
\j2ee\configtool\configtool.bat.
2. within the tree, navigate to Global server configuration services com.sap.security.core.ume.service.
The list of UME properties appears.
¡ To change the value of a property:
i. Select the property in the list.
ii. In Value at rock bottom of the screen, enter the new value that you simply want to assign to the property.
iii. Choose Set.
iv. Choose (Apply changes).
To restore a property to its default value:
i. Select the property in the list.
ii. Choose Restore to default.
iii. Choose (Apply changes).
To restore all properties to their default values:
i. Choose Restore all to default.
3. Restart the nodes in the cluster for the changes to take effect.
b. Set the following properties:
Property Value Comment
ume.superadmin.activated true This activates the SAP* user.
ume.superadmin.password
Enter any password of your choice. This defines the password for the SAP* user.
c. Restart the Java application server.
The SAP* user is now activated. While it's activated, all other users are deactivated. You can only log on
with the SAP* user.
2. Fix your configuration as needed , logging on with the user ID SAP*and the password you specified.
For example, to go online to the Visual Administrator to unlock users or create a replacement administrator user,
proceed as follows:
i. Start the Visual Administrator by executing \j2ee\admin\go.bat.
ii. If you've got not already done so, you've got to make a replacement connection entry during which you specify SAP* because the user name.
For more information, see Creating a replacement Connection Entry.
iii. within the hook up with SAP J2EE Engine dialog, select the connection entry you created and choose Connect.
iv. Enter the password you laid out in the UMEproperties and choose Connect.
v. Do whatever is important to repair your configuration. For example, unlock all administrator users.
Similarly, you'll log on to the UME administration console using the SAP* user.
3. once you have fixed your configuration, deactivate the SAP* user again.
a. Start the config tool inorder to edit UME properties as described in Editing UME Properties section.
b. Set the property ume.superadmin activated to false.
b. Restart the Java application server.
