[Music] hello everyone welcome to zarantech saap basis training course in today's digital era businesses rely heavily on technology to streamline operations whether you're a seasoned professional or just dipping your toes into the realm of sap you in the right place let's dive into the fundamentals of sap basis but first let's clarify what sap basis is in simple terms sap basis is the underlying system administration framework that supports various sap applications it's like the backbone of the entire sap landscape ensuring smooth operation and Optimal Performance understanding sap basis isn't just about mastering a technical skill it's about positioning yourself for success in a rapidly evolving in job market according to recent industry reports the demand for sap basis expertise is steadily increasing with over 80% of Fortune 500 companies relying on SAP systems for their day-to-day operations well simply put it's the foundation upon which countless businesses around the globe ready to streamline their operations enhance the productivity and drive growth whether you're an aspiring ET professional or a seasoned executive having a solid grasp of sap basis can open doors to exciting career opportunities and ensure you stay ahead of the curve in today's competitive landscape in this course will cover everything you need to know to become proficient in sap basis from understanding The Core Concepts and architecture to mastering essential Administration tasks and troubl shooting common issues we've got you covered by the end of this course you'll have the Knowledge and Skills to confidently navigate the world of saap basis and make a meaningful impact in your organization but before we begin please subscribe to our YouTube channel and hit the Bell icon to receive regular updates from us now let us take a look at the agenda agenda one introduction to saap two what is er P three history of sap four concept of transports five non ABAB transports let's dive in so getting started with sap um mainly this is the first day and then we have around 14 days of content I will walk you through the content after some time so this is the disclaimer and the presentations or the examples or images what we use in this one or the pictorial purposes only so please do not share with anybody else and it's a you know with a great uh efforts we have prepared this content for you and uh wherever we have taken from open sources we have given the credits okay it's a simple disclaimer so for today day one okay so even though you have experienced uh in sap basis and you know it still some of you have some questions or clarifications and theoretically or what SCP is and stuff so what I'm going to do today is in the next three or four hours so I'm going to give a a course overview quickly how we are going to plan for this uh next 15 days and then uh we're going to talk about introduction to sap I mean what is sap uh you know as a company and as a software or as a system you know you might have heard about what is sap system and sap company you might get confused about it so we will differentiate what is an sap company what it is all about and what is sap system okay so and then we talk about briefly sap Solutions and when I says sap Solutions it's not the entire sap portfolio and we talk about technical overview of the sap system okay and then we talk about the architecture so and the in generic Landscapes sap system Landscapes yeah after that the most important thing is the sap basis Administration that is what you all would like to upskill or you know understand deep but to start with sap basis Administration it is very important to understand these few Basics yeah I mean about the sap and its history so that your fundamentals or the understanding about the product is clear okay so that you can relate whenever you hear some functional terms or you know some jargons about Erp S4 whatsoever okay so if you have this background how sap evolved and Etc then it is easy for you to uh technically work on these systems okay okay so introduction to sap so if you do you really think that learning sap is hard and learning sap is not hard if you know the right way to start and where to start and what to learn and uh as per your role if you catch that basic understanding because if you look at the entire CP it's uh oan I mean too many products too many modules you know too many domains okay it's not hard if you start rightly from the basics and it's all more or less similar I mean uh no matter whatever the domain or whatever you work it will be very similar so where to click I mean if you really want I mean wa to start and these are the some of the questions I mean whoever comes to this uh thing you have some confusion about what is this sap and what I doing especially if you in a basis right I mean some of you have said that you are working from last three months or four months you might be working on day-to-day tasks but still you have this confusion what is exactly is is it a software is it a database is it uh you know so much frustration I mean is it a functional is it coding or is it a platform you know right uh we have lot of cloud platform and then ja NV platform you hear a lot of these terms so what exactly is it and where you start okay all these frustration if you follow this course carefully I mean with the structure which I have given and with the content slowly I will take you uh to a level where you relate your current role and then the sap sap in general what it is okay so in this course uh yeah introduction to sap okay so in this course we don't focus on entirely on what is uh sap and its entire portfolio Okay the most important important thing is you have to understand is sap main product for sap is the Erp okay so they have started their entire uh business portfolio with Erp and most of these uh companies use Erp and then they have 40 to 50 another components of the solutions which they have but Erp is the core product okay now the question comes why we need an Erp okay so how as sap evolved starting with Erp to what it is today and is it only an Erp solution sap is it uh it's not we will uh I will explain you why it's not an Erp only Erp solution yes they started with Erp but it is not only the Erp solution so yeah let me quickly uh go through what we have discussed so for day one U we're going to start with introduction to sap and then overview of sap what is sap and uh you know as a system and as a product or as a customer sap or a vendor service provider okay and then we talk about sap Solutions architecture and sap Landscapes and basis administration of that if we have time uh definitely we'll have some time so we will do an basic exercise or a Labs where we log into the system and then we will see some Basics Okay so I'll just quickly uh review what we discussed before we have this uh we had this technical problem so we were talking about uh you know most of us might think learning sap is hard it's very confusing and uh it has a lot of products lot of solutions and is it a platform or uh you know sometimes people may think that what are these functionalities of so many modules okay so if you are uh obviously you are here if you want to learn sap and in that particular you want to learn sap basis okay so what we will do is we will um going to start with the sap as a company complete portfolio and architecture and then I will slowly take you to the basis Administration okay so yeah again is it a software or a database fine okay so many of you might have these confusions or the frustrations when you start and if you Google it or if you go to the help.sap.com you may find it's a vertion of information and too much to go through okay so that's always confusing but don't worry so we will start with the first module introduction to sap okay so when we say sap uh the first thing uh which comes to our mind is Erp okay what is Erp Erp full name enterprise resource planning okay so we need to understand uh what is Erp why we need it and how sap could able to make such a big company out of it okay how it was earlier I mean before Erp how the companies are doing their job you know and how how SAP with the Erp product revolutionized the entire industry you see you name any industry okay in the market it's automobile or Finance banking or manufacturing you take any industry today in the world okay 95% of sap Financial transactions like purchase orders invoice you name anything 95% it's a huge okay will touch an sap Erp system okay then you see how they have uh taken the entire world's industry or how they revolutionize their software with this particular product okay so it's very important uh you name uh anything you take banking every transaction or the most of the transactions touch the Erp system okay so proudly uh shows it to the world that 95% of the world transactions goes through my system or at any point they touch the Erp system that's the uh criticality of this Erp and that's how they evolved in last 40 years it's a huge success that we will see I mean as when we talk about the history of sap okay so this we will discuss why we need Erp and how Sapa has evolved to till today and is it sap only Erp no okay so Erp is their main major product and they started with Erp but they have evoled to an multiple levels now it's a very vast portfolio what we have now okay so yeah again sap Solutions which will be very confusing if you go to the help dot as I said if you see the portfolio oh God it will be crazy you see lot of things and it's very confusing okay so yep now we will guy who started a startup it's a magic bookstore okay what he's doing is he is selling the books I mean uh he's one person he started a startup so he uh deal with the authors uh I mean when we say procurement here he talks to the authors or the book uh whoever written it or publishes it and he will procure the books or from the printing or whatever is it and then he will sell them to the uh particular area let's say Bangalore so in Bangalore John is has a magic book store where he's deal with many authors and get the books and procure and then some of them he will put it in a warehouse so he has a warehouse or you know his room or whatever is it Warehouse go on so where he keeps the most selling books and based on the sales what he has every day so he will procure them and then he will put it in a warehouse okay and then okay so he sales and then purchases right so he's purchasing from the authors or the print process and then uh he will sell so he has to manage that Finance at certain point so he is using like we all do right so what we use basically Microsoft Excel okay so in Excel he's maintaining his uh Revenue details I mean sales and then purchases details and then he is doing a simple calculation of okay he is he making profit or is he making losses so that is doing Simple someone formulas using in Excel okay and the controlling since he is the only guy who is taking care of this magic book and yeah some people will be there but only for the ordering and stuff but he's the owny only guy so he has the entire control over the system or his bookstore good so he's the only guy who is taking care of these entire bookstore okay now let's see so yes so he's making good profit he's selling well and he wants to expand his business okay because if he wants to expand his business what he has to do as a startup so number one he may have to start more bookstores you know in a different region or different City from Bangalore to Hyderabad Hyderabad to Delhi or whatever so he wants to start his bookstore because he got very popular in this particular location and he's making good profits so for that he has to sell more books and then eventually he will make more uh money yeah more dollars or more money so that's what so he has got a thought that okay I'm very successful here let me start or let me expand my business okay so what he's doing to do now is Magic Book chain so guys uh you know it's worth spending this 5 minutes uh on this example to get a glimpse of Erp so that most of the sap products okay revolves around the Erp so that's why you need to understand these terms also you know Finance controlling procurement warehouse sales that's why I'm stressing on this aspect so once you have this understanding then it is easy going forward when whenever these terms or the terminologist comes okay so now he is expanding his business so he has recruited five people four people marry call and then just Bob okay so one to five or four people he has recruited I mean so five locations let's say so he has taken uh he has expanded his business to five cities one to five cities and from one person so where John was controlling the everything he has taken to the 25 25 people so now 25 people working for him and five different cities okay now you see the problem so each one of them Mary Carl Bob Jess right so even though John tells uh you know uh the standards and all these things everyone works in a different way so Mary manages her bookstore I mean her procurement her Finance or controlling sales different or call may use Excel or he may use he's comfortable with the book or a ledger he will use in the physical book okay or or just may use something else so each one of them for procurement or Warehouse or sales they are using their different different softwares or different different things even though there are standards but again it's a person who is working right so for example if John wants to understand in this particular week how many sales or how many purchases we made and what is my profit and loss so let's talk about the finance so he has to talk to all these five people I mean five cities and get a glimpse of it and some may give proper data some may not give so this is a big problem for him so even though he has expanded so he's not making money what he expected so so he has expect he has expanded his business and he has uh selling books but not to the level what he was doing and he's not getting generated the revenue what he's expected then he started analyzing what was the problem where exactly I am losing money I mean you expanded and you invested more money five cities and five uh 25 people you recruited but he lost his control so and if he is running like this then it's not good for his FM okay so when he started analyze so he understood that there is a multiple version of Truth this is a very important term which you have to understand so this is what Erp has solved for the uh many Industries that's what has led them to evolve to a level where I said 95% of the world financial transactions touch an Erp system yeah in a particular day which means this is the biggest problem for an any industry you have so many departments Finance procurement warehouse sales so each one of them so this guy Mary looks at the system and you know she documented some other way you know columns or whatever is it so then Carl documents it something so he orders his procurement in a different way and this lady uh Bob Bob may do a warehousing separately so at any point in time it's very cumbersome and John doesn't have control over his department or the people across the cities okay which means each one of them for example you are selling a book called Fountain Head okay which is the most famous by Anand so marry uh you know in this city it might not be top selling books she puts it somewhere else and she thinks that it is not useful and she rate it as a list rating one and this guy thinks that okay it's the best one and he puts it so it's a multiple versions of Truth for the same product so each one of them are organizing differently each one have their different opinion or different thing so that's the problem so then John understood the problem so now he has done an Erp so you see here at The Bu he introduced the Erp system what Erp will do so Erp system he implemented Erp and he has given access to marry C Bob Jess everyone is using the same so the biggest problem uh was the multiple uh version of the truth for the same products now you have one product listed in the system and the same so you have a catalog of products and you know which of them is selling across the regions it's a tab form and Simply Organized and everybody has to use the same thing and John for reporting he doesn't have to talk to anybody so he can log into the Erp system at any point in time he can see okay which of my city is doing properly which of my city is not doing properly where I am having a warehouse problem what all things I have to procure so all this data is available in the Erp system in a structured way and everyone see the same data without any individuals intervention or individual structure of organizing products or the data or whatever so he has single version of the truth okay for a particular product or for a particular thing or everybody looks into it as one system suppose if you look into an ARP system anybody whoever has the access to the Erp will see the same data suppose you guys working three to four months right you go and open One S and table you get all the same purchase ORD same invoices everything is same so now you see such a complicated model where he has lost control of the people products everything and he has bought everything under control so what do you understand from here Erp has Sol the problem of multiple versions of Truth and it has given a very good control about his organization now you see he has expanded to the four cities now he knows where exactly which is which of my location is not doing good then he can control that location and what he has to do to improve okay so now the scaling up or the scale out becomes much easy if you want to expand so now from five cities to 10 cities you can expand without any uh cumbersome activity or engaging lot of people because your Erp you just have to give them the access to the Erp system okay see this is what has solved the problem for many Industries Erp has sold it so anybody who started their company as a startup if they want want to expand or grow Erp helps them okay that's how the companies were able to do a lot of Automation and then expand drastically so you take examples of Tata TCS itself you have Tata steel right so you have Tata steel you have consultancy Services you have many Tata hotel management right so now how ratan Tata organize all these things right ran Tata how does he gets it so it's a conglomerate right in India so how does he understand if his businesses are making right or not so he implements and P system for each and everything you see in TCS you have human resource management you have Finance you have recurment everything right so those all things are tracked in this one and you take Tata steel Tata steel again there steel purchasing right then the coal so the manufacturing thing everything has to be integrated so they all connect to an Erp system and as a CEO you will get a glimpse of okay which of my business is doing fine and which is not doing properly and then you can take some improvement actions okay so now you understood the Erp how how it solve the problem for the industries and this is what IP is doing in the market now okay so now you understand what is Erp right enterprise resource planning so this will simplify good so whatever I already talked so I have put it in the uh slide okay what I given example as the Tata steel or the TCS so it as I said he has multiple businesses hotel management and all it collects man manage and share data you know it's a single version of the truth so that you can make better decisions or the better choices and then as I said if your one of your business is not doing properly and then you can control those processes okay where exactly you get a glimpse with the analytics or you know as soon as you have the data you can do in the market so many business analytics tools you know you have sap analytics cloud is there Microsoft business intelligence is you know that's a trend now data science or the so many uh things are available to do analysis okay so but do the analysis with those tools and then get control the processes where exactly you are making problem where exactly you have the problem identify it and easy to control that particle so track and measure again every of your all of your businesses you can't track uh in in a real time data okay so earlier there was no real time so at least I mean I don't know if you heard it even now you hear right month end reports in BW okay month end reports and where you don't take you don't Implement any changes in the system and you ensure that those reports are generated but now we have this trend of real time so that we will talk when we talk about the Hana but yes so you can track and measure earlier they used to generate weekly reports or some critical reports daily reports and monthly reports okay and automate processes so as I said uh so once you have this picture or the integration of these departments procurement financi finance and then sales right these are all integrated in Erp so which means uh for example let take an example of the magic chain you have sold 100 books today okay one particular book let's take uh Chan bhat's book okay it sold huge number of copies and it's a very good success so earlier you have to call and place an order right I mean hey you know today 100 books are sold I need a 100 book stock but here when they are integrated the moment as soon as you release the purchase order as soon as you sell those books immediately you get uh you place an order for the 100 books okay you know that what is your Warehouse capacity okay I can hold 100 top selling book as 100 books then immediately you will place an order so the procurement to the sales it's been automated so such process I mean you take in steel industry as well okay the moment you generate the iron and then you sell the steel and you have to place an order for the raw materials right so those number raw materials immediately it will place an order so then it will generate purchase order and to the vendors whoever provides those raw materials that's what so you can automate these processes okay and then improve quality and efficiency so now you have a single version of Truth and everybody or the every uh business is following the same Erp system so you can I mean if everybody is using the same then there is a chance that very less mistakes because you test it properly and everything is proven and then it improves the quality and it's a repeative and automated task there efficiency will increase better okay so then at the end run business better so that's the slogan for sap right so I mean if you look at the sap there's a tagline run business better or then there is a run simple okay so run simple means because Erp is taking care of all these cumbersome activities where you used to have different different department they were taking Erp takes care of such a nice and controlled way so that's why they say run business better and run simple you know that that's the current tag line they say it's a simple run okay so that's about the Erp okay now the question comes okay why only sap succeeded don't we have another Erp Solutions I mean what were the competitors so we have many uh Erp Solutions but uh we uh I will put you only the main few few sap is there Oracle and then Microsoft so sap uh is the leader in Erp and nowhere these Oracle and Microsoft come closer to sap okay so in the sense as I said 95 to 98% of the market is captured by the sap that we will talk about when we come to the customers data that you can find it in help.sap.com it's open source information which they will provide and same is with vill so they were not able to succeed uh I mean so as sap Microsoft there were different regions but uh you know it's not uh it's a business once we have time at the end of this 40 day 40 hours of sessions so we can discuss those things why sap only successful and why work and Microsoft it's very interesting topic how these compete each other and how they come up but know that in Erp the leader is sa only yes and along with those top three players you have cill you have JD Edwards and so on so things just know it just for information I you should not think that Erp means sap only no other players no there are other players but sap is the leader so okay as a part of this course we'll talk only about sap so we'll not cover about any any of these other Solutions okay so any questions before I proceed further with the history of SCP before that I was just giving an introduction of the confusions and you know when you want to learn sap uh you might feel confused on where to start and what to start is it a database or software and how difficult it is to learn those things we were discussing but have you gone through the case Erp case what what I've explained so now you got glimpse of you might not have got a glimpse of what is sap but at least you understood uh what is Erp how it can simplify the uh business right how it can help you to scale out your business with the use case or the example what we have discussed so now as I said the interesting question how SCP was able to capture the uh 95% of the market okay now we need to see the history of sap how they started and uh because this is also important because when you are working on the particular solution right it's always good that how they evolved and uh just worth spending some five minutes of time and here also I will try to explain about the uh technical things so that you get uh yeah this is what I don't give you the entire business how they evolved and how they competed with everybody and how they earn more money fine we can't discuss but the most important thing is how they evolved as a product right as a Erp solution how they uh you know transform themselves once they started that's important to understand because you may have to work with multiple versions of these systems okay suppose some customers uh okay why we have to understand this history I'll tell you because now you might be working NV 740 or the latest system those of you who are working I'll tell you you might be working on the latest questionss right there are some core Industries who do not want to migrate okay sap could have introduced in 1972 one version of the system and they want to be with the that that version of the system only they don't want to upgrade they don't want to migrate it's not like us we will change our phones in two years or no they don't want why so that's why you may have to support those systems also that's why you need to understand what were the Sap's earlier versions and what is the current version what is the middle version also so I'll give you example of an Industries or customers some for example let's take banking okay do you think banking is ready to migrate if you go and tell them that hey upgrade your system no they'll say that no boss please I don't migrate okay banking the most import whenever you are migrate or update your system the most important part is the data so for banking data is the heart right if you go and if you make some simple table entry for example with your name John John has one lakh account in his entry and if you make one zero extra that's it one CR it becomes so data is the most important for the banking so banking person will tell that I am happy with my solution whatever sap has provided I'm okay as long as it runs for another 100 Years also I'm fine fine on top of it I can improve my application logic or servers performance Etc I can work on it but data I do not want to touch it so there are customers like that okay who do not want to touch the data because they scared and it's the heart for them and if they lose the data that's it I mean their entire reputation their company and they will go bankrupt it's you know banking system if you lose the data that's it you gone so that's why you have to support those wer versions as well okay that's why I'm giving you the history of these products so it's not for just information purpose so you need to understand what they had SCP so in 1972 five x ibmers okay IBM guys so they have started uh you know they have producted one simple software product okay for different customer in IBM so what IBM said is hey you close this project it is no longer needed okay because they had some other software or main frames IBM was doing the main frames we don't want this product you start you take I mean this is no longer need to close the project so these Five Guys thought that no we have developed such a good product or a good program or good thing so we don't want to give it up we want to start it so what they did they talk to IBM hey IBM you know you want to close this product let's talk a deal fine you give this product to us and then we will make a patent and we will start working working on it then IBM said anyway closed product IBM has nothing to lose so what IBM did you see in the world most of the products of the startups who came up and today they have grown or you know somewhere related to IBM because IBM was the only guy who was then 100 years in the market that time even now they have there okay but let's skip that way so they took the product and they started their own company in Germany in wov okay so which is the headquarters forp now they started in a small bunk uh this uh this product they took the patent and theyve legally they have taken out from the IBM and they started so in 1973 they started with R1 okay so R means anybody knows it's R what R stands for because you hear this R1 R2 R3 and then there's no R4 don't worry so R1 R2 R3 R1 is R stands for real time okay as I said in the magic book chain example right John has expanded his business to the four cities but he's getting a real-time data what are my sales what is my procurement what is my warehouse data everything he can log into the Erp system and he's looking at it so that's why it's called real time so r one one means one tires so Tire t i a r okay and then two Tire R2 real time two Tire R3 real time three tire so what we have in the market now is the R3 okay so this I will explain what is a tire one tire 2 Tire three architecture so simply you can see here so R1 means presentation application and the database resides on the same host or the same server okay that's the R1 and then in 1979 okay these guys thought that okay if your database if your application is having the problem because it's a bottleneck so your GUI or everything your application uh I mean the portal or whatever is it the end user thing graphical interface and then the application and then database running on the same host so it is becoming a problem because two many resources being used on the same host so what they taught is let's break here okay separate the database and application so here you see 1979 so they have come up with uh presentation layer separate I mean the guis you are using now and the fury interface or whatever interfaces you are using interacting with SCP they have separated that section and application and database they put together okay so I mean application Computing and then the database are on the same host and remaining part they have isolated 1979 so that's where they came up with R2 architecture and they have also came up with abap at the particular time abap is a programming language used to develop this sa products okay so 1979 was the time they started with IAB 1992 they thought that okay still the the industries are growing so my application and database on the same host also causing a problem let me separate it so now you have three Tire architecture which is currently majority of them are using 1992 onwards so presentation layer is different application layer is different and then data base isolated so all these three this a three Tire architecture okay so 1992 and then 2004 they came up with sap uh business one which is for the it's a it's a Erp only but it's for the small scale Industries this again I will explain uh SFS portfolio later so the sap Erp or the net weer also they have introduced in 200 2004 is the game changer for sap the when they introduced this Sap net weer okay and they also introduced evap plus Java Okay so until then they don't have this Java so they have introduced Java also which means they expanded their you know capability or the open source thing and many things can integrate or many they have opened up basically to the market so two things evap plus Java so that anybody can come and develop on their net weer net weer is their platform okay so they have created a platform uh like you have Google cloud platform or you know where you can do uh servers and then coding and anything you can do over there so that is what the platform is so they came up with the platform net weer and they have introduced evap and Java are the main players over there so main coding coding things if you want to develop your application and uh a year after 2005 so sap has introduced Erp uh ehp okay so they don't want to develop you know erp1 Erp 2 Erp 3 so they they saturated with the name and they were happy with sap Erp so how do they release their versions so enhancement packages so the modifications or the functionalities they have released as enhancement packages so you might have heard sap Erp ehp 1 hp2 ehp3 hp5 so what was the late what is the latest ehp it's ehp8 okay so when the slide was there it's ehp7 but ehp8 what we have now that's it sap has stopped generating or uh creating enhancement packages also after ehp8 that is the latest one Erp so okay so the next version is saps farana after Erp okay that we will talk today at the end of the session we will talk about saps for Hana okay which theyve introduced in 2015 so yeah 2015 sap uh so yes 2009 uh 2005 they have released this uh Erp and then ehp7 and the latest ehp is ehp8 and in 2011 um the most trending or the buzz word in sap right sap Hana so in 2009 they have introduced Hana so Hana is uh again is a platform if you have to if I have to put it in a clean words platform it's but database is its main component okay so what is a platform and what is a database so database is only a database thing you know to store the data and to retrieve the data column store row storage blah blah blah to store the data but platform platform has a different I mean different functionality yes database can be a service in it but platform means you can develop applications you can code on top of it you can integrate with it you can third party applications or sing so platform has much more capable features than a simple product so that's why sap Hana if I have to put it's a platform form but mainly sap uses it as a database okay in 2011 they have introduced it's an in memory uh when we have this Hana session in detail I will walk you through the architecture and how Hana evolved and how it is different from other database but just know that 2011 they came up with sapana so in 2015 uh 2009 itself there is a business suit this is the most successful product of sap thing so don't worry sap business suit means uh something different word so what they did is uh you know they clubbed uh some five to six products together and they called it as an sap business suit okay for example so far what we understood sap Erp uh HP Erp was developed by sap and they have the latest one is ehp8 enhancement package 8 so what they thought is okay my Erp is doing fine so what about the customer relationship management what about supplyer relations what about the product life cycle management what about the Supply Chain management right so those are all they have separate sorry those are all they have separated systems CRM SRM PLM and Erp they combine all those five components or the five products in one thing they called it as sap business suit on which platform they developed this business suit net Weaver okay when I say net weer you always related to as a platform neter platform so I will talk about this also today in architecture net so on top of the net we they have introduced business Su which combines five or six systems okay and in 2015 they came up with saps for we will talk in detail when this s for hanana comes okay what is s for Han and how it is different from the Erp yes it say Erp is next version but how it is different what they have done Corrections or what they did it that we will discuss it so now you got the glimpse of uh what is sap right so how sap started in 1972 and then how they have Ed in this 40 years that's it so if if I if I tell you simply these are the there are thousand there are many products 4050 product portfolio but this is the most important thing which you have to understand as a basis guy okay so they started with R1 they have an R2 they have R3 architecture they have introduced so these are the three uh Tire three architectures and then they have an Erp okay and then up to ehp8 uh they have released it and they stopped it after that so they came up with a sap business suit what sap business suit it is nothing but combination of the Erp CRM SCM and other various products and later they came up with es farana so this is the timeline or the product line which you have to understand so everything in sap you know revolves around these things okay everything 98 99% of the things in sap will revolve around it and as a basis consultant knowing this is more than sufficient for you to do your job in a best way I would say in a better and uh very nice way this is the thing which you have to understand you don't need to understand what is that you know FY mobile thing or the cloud platform and those things no so even though the namings and different things are different but at the end of the day everything comes to you and touches the system because no matter what you develop uh right at the end of the day that has to come and touch the Erp or the business suit or the as for system you got it so that's why it is important only to for you to understand this product portfolio how sap has evolved okay so now the so before I proceed with the uh what is sap so now we what what all we discussed so we discussed Erp okay uh I mean with the magic book chain example and then we have also gone through the history of sap I mean what are the main product portfolio how how they evolved till today so now now I come to the questions what is sap today okay so yes you understood the history 1972 how the architecture has evolved now we'll see so they have this 40 more than 40 years of experience okay so they have around more than 20 30,000 of employees across the globe and you see the customers 293k customers which is 2 lak 93,000 which is a huge customer B that's why I say when I say 95% of the world financial transactions today you know one or the other way they touch the SCP system okay that's the presence they have in the Erp domain so they have 130 countries um you know um they have their employees in 130 countries almost all countries they have their uh company and then their employees working there and they have this 190 countries okay in the customers basically so which means across the globe they have everywhere the customers Sab customers okay so yeah I was explaining right um when we say today let's say let's take today as an example as I said there are three kind of organizations if we have to put it in a simple way Smalls siiz organizations I mean who just started their startup midsized organizations and large organizations for example like your TCS okay so now sap um has to catter their solutions to all sections right I mean they also started as a small five people to to this level they have to C so so I mean if you take today the moment people say sap implementation oh God this is so costly so I mean that's the impression it's a very big product too many resources too much cost costing and too much of efforts to be needed right it's like complete project so imagine how many TCS employees are in basis projects okay how many of you work in sap projects within sap right so many thousands of employes are working on SCP okay in TCS itself then take IBM exer and any other company who are Serv supporting right so people have an impression that sap is a very big product and it takes lot of skill uh efforts and thing efforts and money okay that is the large I mean large Industries so what about the small scale Industries because today small can be become a bigger industry later point in time so that's why sap has segregated its products in three simple things so small means a startup who just want to implement sap business one it's a simple solution just Implement on a small server and then it will solve your problem so as soon as you grow your business from this small guy and he will become a midsized then sap will tell that so this is an important Market strategy as well business allinone sap will tell that hey okay sap business one is successful okay now you have grown and you are upscaling okay now take this midsized sap business allinone so this guy is already using an sap product and and sap will help him to move to the midsize so then he also win-win so the client will win and then as an sap they're also winning a customer right they have grown from small to big that is what they did in this first 40 years so sap has grown along with the customers okay that is their secret or the success mantra for them in this last 40 years so they took them as a small company they help them to grow and give them their software and that guy it is easy for him to expand okay and then he will become a midsized organization so then the midsized organization will become a large organization after a couple of years then sap will tell that oh good very good let's go with business suit let's put the uh implement it so now again he's already using an sap product sap will handhold him okay and sap will suggest them that okay product wise I can help you implementations you know sap support they don't have a bandwidth to support because it's mainly a product based company so sap has opened its doors to multiple partners right so you have TCS you have I mean sap did not hold it to himself themsel that you know I only support it or I only do it so they have expanded the doors they opened the doors to you know TCS IBM Accenture you name any company they infosis Vio all of them support sap projects right so sap has opened their EO system for the partners I mean they made them as partners TCS and all so what I what is happening now so now sap has played a very good uh uh customer you moved them from the mids size to large size and then this large size support you open the doors to the other vendors they are supporting it so now it's like everybody winning everybody is making everybody is Happy customer is happy he has grown to a bigger thing sap is happy they have implemented their solution Partners also happy I mean TCS vpro IBM everybody is happy because they got the support projects you got it so now you see does any of them will lose um I mean you see if anyone of them want to develop or product or something it's a loss for them only right right they can't create an ecosystem like sap did now everybody wants sap to be sustained right so as a partner suppose if you are supporting sap project you think that oh sap has to be survived I mean sap has to be in a good condition then you provide support because you are making money out of it and the customer he has grown to a bigger level so that is how sap has grown from five people to today some 30,000 or 40,000 employees and 300K customers yeah that is how they are surviving it's not just sap everyone in it ecosystem wants sap to leave or breathe okay so customer Partners everybody wants sap to leave that is the secret for them so they have opened their doors to everybody everybody is making money everybody is winning it's kind of win win win strategy okay if you have if I have to put it in a marketing okay fine let's not too much get into the marketing thing now you understand so small midsized and Lodge so whatever you as a basis consultant you always work on this sap business suit the right side one L okay so all your TCS projects or any project they you will be put into this business suit only not in this business allinone or business one because they are small skilled and the customer can himself manage it okay so now here you understand the saps how they're cing their Solutions so now you will always be in the right hand side business S as a basis consultant so remaining very very less you'll get support I mean okay now after we understood this strategy and all these things sap do you think it's only an Erp sap is not only an Erp okay so since I've stressed it more on the Erp yes they started their career or the company with Erp but it is not only an Erp solution okay so sap has analytics so sap analytics Cloud see you have an Erp solution and you have so much of data where do you store the data you need to have a BW SAP BW system and then you you have to run some analytics on it and again why do you want to go to Microsoft or somebody to provide you the analytics tools okay he has their analytics tools are there in memory Computing as I said realtime data Hana in memory Computing and then now they have this cloud computing as well you know sap Cloud platform so but these are all things you might not get too deep into it but definitely We Touch This Erp in memory Computing a little bit I mean we have a session for four hours where we talk about how Hana works and stuff and Enterprise Mobility so mobile these days everybody wants to do their stuff over mobile okay so sap is not only an Erp so now it has around 40 plus uh products in the market portfolio all of them are integrated towards Erp but Erp is their core product okay so as I said yes Erp is their core and they all these another 40 systems will complement Erp I mean to run businesses better okay because with the increased demand these you know mobiles everyone wants to so those products also sap has developed and they all will integrate with Erp and then that helps to run them better okay so what all we discussed today I mean so far so we discussed about U you know overview of I mean Erp clearly we understood with an example and then we understood the history of architectures R1 R2 Erp and then sap business suit as for okay and then we understood what is sap and what are the solutions or the what the uh Industries SCP C their services okay so these are the four important things we have understood so far next we'll go with the uh I mean I said right it's not only Erp they have got 40 plus other Solutions I'm not going to go through the all those Solutions because it's relevant for you as a basis guys so I will try to put a platform what are the important Solutions and which you will be working or which are you already working so you see here so many yes sap business one for small scale s for Hana sap Erp sap F I'm just reading out some names okay sap SCM sapsrm SAP BW sap enterprise portal sap business Hood you you have so much you go crazy if you go through all of them that's why I was telling uh it's very confusing for you if you start reading by yourself um in an help.sap.com or somewhere uh so that's where uh we have to structure and we will focus uh as a basis consultant what is is important for you yes so these are the few important areas which you have to look into it so sap Erp as I said it's the core so saps for Hana so it is nothing but an Erp system I will explain you today at the end of the day what is saps for but you treat these two as synonymous I mean if I if I ask you as a basis guy for you all of these Solutions are same it doesn't matter what product sap produces that is the Simplicity of basis I mean the best part of basis lever you have but it's a bigger size and then the engine size is bigger that's it so everything the screws and all a little bit different but the whole mechanical you know the concept is same okay the fuel combustion and then engine it generates star and power and then the vehicle moves but for lari they have their specifications like you know iot devices and blah blah blah cars and all but as a basis guy just imagine this way for you all of them are same but it just with some extra additional configurations or the integration scenarios okay so but we will talk we'll not talk about all of them here so if you understand one or two products of this as a basis thing it's very simple so we will talk mainly sap Erp and then BW a little to some extent but not in detail but as I said basis guy everything is same okay sap okay as I said in 2011 sap 9 sap has introduced sap business suit okay that's what they call this word so remember this word sap business suit they don't they're no longer called an sap Erp so sap Erp is a part of this business shoot okay and then so now slowly I am taking you to the uh what is currently you have a technically sap and then to the platform on which they have developed it so sap business suit sap business Warehouse BW one of the product so they all developed on the Sap net weer platform okay it's very important what I said about the N platform I will talk later but on top of this platform they have developed business suit okay so now let's talk about sap business suit so what what I said in sap business suit we have Erp SRM CRM customer relationship management PLM and SCM okay so these are the five crucial components for the business systems I mean all these are integrated okay your customer relationship management data is integrated to the Erp sorry and then your SRM data is related to the Erp SCM Supply Chain management data is related so whatever there all will help or complement Erp basically at the end of the day okay so what sap did is oh I have so many things let's combine them and I release an sap business suit so that it is easy for the customer to implement right so hey all your modules are all your functional fore supplier customer everything I will integrate and I will give it as a package you if I have to put it sap business suit okay in that Erp and these are all part okay so yes sap Erp is a solution system business suit is a combination or a bundled package okay that's the differentiation now we will talk about sap Erp mainly so as given in the magic book example right so you see the main business components or the processes what are they Financial Accounting okay controlling I have explained that's why I told you that example is very simple example where you understand these terms okay warehouse management books and all sales and distribution so real estate for example real estate is also important right you need to have a land to start your company okay there also how much you are spending how much land you needed how much you have to expand that and cash management how much cash I have how many assets I have so what is my treasury what is so these are all the uh function modules I would say okay so function modules they were all part of the Erp so some of the so these are all you know financial and all they are all common for all the industries for example many majority of the industries not I can't put it majority of the industries but there are certain things like oil oil industry or the banking they have their own specific requirements okay for them the most important part is the uh for banking sector cost and the data I mean financial data and oil and gas you know from Upstream to the downstream from the well to the how the oil is going they they need a separate module or separate structure of the Erp okay for that sap has started with the industry solutions for them specifically so now we are going to close up this getting started with sap what we understood so far what enterprise resource planning is right so with the magic book example what it will do it will do the improve quality and efficiency by doing these things control processes track and measure automating processes and the most important thing is single version of the truth different cities or the across the globe everybody whoever logs into the Erp system they have the same product description same thing same thing so it's a single version of the truth okay as a CEO you'll get the live data what is happening in my thing so that you can control your thing so what are the main competitors for sap Oracle Microsoft but uh mainly sap in terms in when it comes to the Erp okay then what we discussed history of sap right how they have evolved from 1972 so what were the architectures they have R1 R2 R3 right this is the most recent one and which you will work in day in and day out I mean in your sap projects and then they came up with the sap netw platform this is very important guys netw platform um means majority of the systems still today are on the net platform that I will in detail I will explain you the net architecture when go but understand this is the most important thing and as I said small to the bigger ones sap will offer sap business one or business Allin one you don't need to remember these two it's I mean you don't work day in and day out but just know that so the most commonly used in the industries is today sap business s okay and after that sap came up with Hana in 2011 and then saps for Hana in 2015 so this saps for is nothing but next version of the sap Erp simple if I have to put it so Erp they've stopped with ehp8 I told you right the most recent enhancement package is the ehp8 okay so yeah an sap it's not only an Erp uh it has more than 40 years of experience and you know these employees they have analytic Solutions in memory Computing cloud computing Enterprise Mobility you have a lot of things but you focus mainly on thep Solutions and then we talked about sap business Hood what what it contains sap business Hood Erp SRM CRM PLM SCM and others these five components so it's just that so the complimented Solutions of Erp are bundled together and then given as an sap business s and the another one so Erp you know you get transactional data right too much of transaction selling and purchase orders and all so that data will be moved to the warehouse business Warehouse okay where you can do analytics or work on those data right I mean to prepare reports or revenue losses and profits and that's why business W comes into picture okay so all of these things are developed on net platform okay so any questions guys before I go to the technical overview and architecture any questions or can you please acknowledge that no questions I will proceed further so yeah now you got a fair idea about the archit the all these things now we will slowly get into the so it's worth spending this one and a half hour so that you have clear understanding of sap right now we will slowly Deep dive into the technical things and then from today uh from now onwards whatever I'm going to talk it's more relevant for your work and uh it's like more or less core thing okay let's start now so as I said the most recent architecture is the R3 architecture okay so database at the bottom of this um architecture and in the middle you have application and then the presentation simple database is something which you stores the data and then um it makes the records of the data what you enter into the system the purchase orders sales or procurement or whatever is it it say stores the data so nothing much to so it is hosted on a different host and then application so application is so database application is the middle section so where your SA systems so let's say example sap Erp see in the middle so you have an Erp system okay and sap Erp system connects to a particular database okay instead of Hosting on the same host they separated I mean they segregated logically these sections basically okay and then so system administrators which are you or you know whoever working in the basis will have access to the application and database okay so who are the administration so this is important so what all things you have access you people you you will be working on application and database as well until unless you have a separate team who is taking care of the DB but basis means um we'll talk about basis roles and responsibilities after some time it's very very important that uh you understand database as well basis doesn't stop at this application layer Administration Erb Administration but you have to have the database even though you have a database team always try to upskill yourself in the database okay because you can't separate a b basis consultant without database knowledge is uh not good thing okay so I mean it's in a Half Baked one so always your focus should be application and database you have to be thorough okay whenever you are and then the presentation again system administrators have like sap GUI right or the mobile or the fury or the ones which you access to the system so that is the front end you would say presentation layer so here you have AB Dev velers end users business users who will maintain that data everybody has access to the presentation layer but application and database you and presentation also you have the access that's why basis guys we'll deal with all these three layers and as you grow your career please focus on the all three areas don't restrict yourself to that okay I'm a basis guy and I will restrict to the application and I will do only a presentation no you have to have the end to endend scenario I mean end to end understanding of how your sap system works that's the complexity of basic so it's very complicated module SCP basis is the very complicated or the very technically demanding module within sap okay because it has no limits that's why you have to see in a simple thing I giving three layers but it's very complicated thing so okay why they have introduced this three three Tire architecture in middle so this one application layer so for flexibility security and performance okay why we need flexibility for example your your organization then end users has increased business has increased the industry has set up a new Factory right so the data has increased so if you have a one server so that will you either you have to increase the server size I mean it's not easy to increase the server RAM and CPU instead of that you just put in another application server or another server another server so scale out that is called scale up and scale out scale up is increasing the existing server resources scale Out means one by one you keep adding so that flexibility you have it and then security um so I mean if you put all of them these end users by mistake somebody assigns something and they can come here and they can stop the application right so application you restrict the access or the OS access to only to the particular people I mean only to you or the administrators only authorized people can log to the server so that they don't tamper with the data as I said if you go to the table and if you make an entry change if you add one more J in the end then it will become a huge amount right or you delete you can delete purchase order so only the author people can log the particular server or the application then the performance as I said scale out the more number of application servers you add the more better will be the performance the load balancing will happen Okay that's the U reason behind introducing this three Tire architecture and it's the most successful and most useful architecture so far in the sap okay so now you have got the overview of the three Tire architecture so this is suppose uh some company company or the TCS us implemented an SCP solution okay or or we'll name some company uh let's put BP or HP HP means o Reliance okay Reliance has implemented this sap and TCS is supporting which is you guys okay you guys are supporting this sap R3 structure now there is a problem as an admin you cannot able to open the I mean you cannot able to solve the issue and you have raised a ticket to the product support okay what do you mean by sap product support sap you have raised ticket to the sap that hey you know as an admin I think this is a bug in the product and there is a problem in the code or the the functionality of the given thing okay now you raised the ticket to the sap product support okay sap will tell you okay I can't understand from your this thing I mean from your description or whatever is it is I would like to log into the system and understand it you got it I they would like sap will ask you to log in to the system that is when they place a request for opening the client or you know log to the system R3 Connection open okay now you have to assess for sap product support guide to check does he need only the presentation layer I mean does it solve the purpose that depends on the issue for example it's a code buug he just needs an access right I just log to thegi and you give him the the required authorization and if you still say that I'm not authorized just run some trans su5 there's a transaction or he will let you know the what authorization are needed okay we'll talk about how authorizations are assigned to that particular user so he logs into this and he will check it oh that is the when when I say connection opening means that is the meaning so the product support you are opening a connection to the product support guy to log to this particular system did it answer my question so opening connection not only on sap level always sap GUI level suppose if it is a problem in the server level they will ask you to open the connection to server as well okay but in very very rare scenarios okay but sometimes it is it could be a problem with the database they also ask you to open to the database that's why you as an admin you have to assess you know with the experience and with the sense oh this could be a reason this could be an application issue let me open to the sap application and if he that guy will be expert okay the product support SCP the moment they look at it oh hey guys this is not an application issue put it to the server manag server then they will ask you to open server so then you have to open the connection to server then database now we will go with the SA system landscape okay again most important thing for the basis guys so as important as the three architecture what I've explained so you have um I think you might have heard it I mean you might have working it development quality and production okay this is a three system landscape we call okay some customers will impl Implement four system landscape some customers will Implement five system landscape I will explain you what are these things so these are the majorly used thing uh 70% of the customers use this three system landscape only remaining 20% you will go for four system landscape remaining will go with the five system landscape but five system landscape is the very expensive one okay first let's understand this thing so you have three system so development any sap customer for example um as I've given um this magic book chain if he wanted to implement the uh sap Erp see whenever I talk about this thing you always connect to the Erp because the concepts as the basically the work is similar for everybody I mean any other component or any other product okay that's why I always give an example of Erp only so he's implemented an Erp system okay so but if he has to fix something or if he has to develop something right suppose if he has only one system he will go and make the changes and that time it has an impact for the end users and his business is in a Hal situation right that he don't want to do so his business has to always up and running FS for example banking always your banking is up and running your industry has to run everything has to run always so you don't want to trouble your production system that's why sap has introduced three development quality or the test system production and for example I'm doing the training or you have got the access to the test system right so even though you have access to your customer client customer systems right why we are not asking you to do go and do these exercises over there because they are the production systems if something you do that will cause a business impact right so the end user will suffer or there is a revenue loss if your sap system is not running so that why we don't want you to do your testing and you don't want to do your trainings in in the production or the live systems in live that is also again one live is a term once it goes like okay production system that's why SCP has developed three system propose always proposes to the customer minimum this landscape so development system so if you want to do a customizing if you want to do some um tweaking of a table tweaking of certain thing so that customizing you develop in the development system don't touch the production so once you do the development you move it to the test system okay so in test system you test the functionality so this test system is almost a replica of the production system you know most of the cases so test system do have the functional data of the production okay because that that's why I'm not sure if you guys hard of it system refresh some people will do every 3 months once refresh some people will do every six months some people will do yearly ones what is the system refresh you get the production data and you put it in the test system reason because whatever you are testing it has to be a production like system right suppose if you are testing it in a different system what is the use that functionality may not work in the production that's why your production and quality of the test system always have to be M majorly in sync in terms of the data list functional data so your development will go to the test okay let me go to the next slide so your development will go to the test system so you see this truck through transports that we will talk tomorrow how this transport will be moved and then once you test it this functional data so you do a testing so let's sayp example as I said this test system will have the functional data of the production okay you test it and then you move it to the production so since you have tested it and test has the data similar to the production then your code most likely to work properly in the production you got it so this is the three system landscape so what do I mean by the five system landscape or the four system landscape okay some of the customers okay like for example uh nesle or um BP British Petroleum so they're big big customers you know they have oil oil and BP is oil and then nle is like chocolates and they have a huge huge retail so this manufacturing factories and everything so what they think is oh God no matter whatever it is my production should not get impacted whatever the bug you fix you have taken to the production my production system should not get impacted I need extra layers of landscape okay so for them spending on the infrastructure is nothing I mean because as you know for one system you are keeping three landscape right development one system test system it's extra cost for setting up this landscape but for those guys it doesn't matter because if their production system is impacted for one hour they have a million dollars of loss they don't want to get into that situation so what they do is they will put one more system here so left hand side sandbox I think you might have heard it sandbox and then here production before production they will put pre-production okay that is a five system landscape so whatever you want to try first you try in the sandbox that's like a playground you do it then you take me to the development then you move me to the test and then you move to the pre-production here one more system so where you test again and then you move to the production so it's a five system landscape but which you rarely encounter but three system landscape is the sap minimum recommends to anybody so 99% of the customers will have this three system landscape okay mean five system landscape also has these three systems I mean three systems but minimum sap Recs so good so this is the three system landscape so three Tire client server architecture so this is how it looks so database application presentation and then you have yeah it's there so why do you need this minimum application layer flexibility security and performance and then you have presentation layer scpg so now you understood the development quality production and why do you need a three system landscape and apart from three system some customers Implement five system that's it depends on their budget okay so standard or customizing or the thing whatever you have developed will move to the test and then it goes to the production okay so all these systems you administrators have the access that's why that is the whole purpose of this slide okay so development you have to work quality you have to work production you have to work so for others like business users and end users they might be a limitation but for you guys as I said any system your work is same I mean irrespec so that is the Simplicity of the basis but it is also very complicated technically so Simplicity is you have access everywhere I mean you development for example developers developers they only have access to development okay because they can't touch the test system and the quality guys will be there functional testing guys and then production uh no expected to be no issues even though there is an issue basis guy has to import here and then if there is an issue again he has to import to the development guys only hey guys this transport is causing a problem or this change is causing a problem and then that guy has to fix in development only so which means he's not first of all developers are not supposed to change anything in the production so that's why you have access to everything and you are the guy who has to inate to the respective people okay so you have access everywhere um I mean you will be responsible for administering all these things but architecture and all you know wherever is most relevant for the basis right so I will automatically stress it over there okay for example in business suit where I stressed it so wherever it is of more relevant and I mean needs a special uh this thing I will always uh stress it okay now after discussing about the uh what is sap what is Erp history of sap and what are the sap Solutions and what is their landscape now now it is important for us to understand the sap architecture and some of the slides which I already explained in this one but I will slowly take you to the netv okay after that I will take see hope you getting the flow right so what I have going to do now is sap business suit I have introduced you on top of it on which platform it has developed net Weaver right on net Weaver so see overview of sap you understand Erp sap business suit now I will take you to the net weer and from here your core think will start so on sap netw everything is developed your business suit product portfolio Erp everything is developed so now we understand sap netw architecture after understanding the sap netw architecture we will understand the architecture of sap system okay what all you know ABAB based systems or Java base systems and then we will close slowly we log into the SCB system okay that's the flow I'm following now now this we have explained founded in 1972 what is sap so key features sap Erp is the main product for the I mean just recapping before I go to the this thing so sap history have explained so what are the products they have developed and just in more representative of the technical facts some of them for your reference purposes I mean documentation purposes so they have started in 1976 72 and then slowly they have evolved R1 to R2 R3 and so and so things so Technical Solutions I just explained so business suit is the key or the in business suit Erp CRM SRM and apart from that there are 40 plus solutions they have so as a basis guys for you R1 to R3 architecture and then business Ro applications are more than sufficient but anything is a similar same way for you guys okay so Erp packages I explained Erp 6. ehp8 is the latest one and these are the component people soft from Oracle and JD AdWords and these Parts also I have covered okay so this is in a different way of representation so business one for the small scale or the basic functions I explained you right small mid and large scale so by business by Design so software on De it's a small size only this also so business allinone for a midsize and sap business suit this is the most important all of you will work on this sap business suit for a large scale Enterprise okay and then so some of the industry Solutions as I said Aerospace they are specific Industries automative oil so for them sap has it they tweak the Erp and provide some solutions I mean table structures and everything so that's why they call it as an industry Solutions okay so this is simple portfolio so basic elements of sap solution as I said business suit uh I mean sap solution will be developed on the Sap net weer majority of them okay I'm not restricting to this but don't take otherwise everything is developed on Sap net no so there are in memory platform like Hana there is sap Cloud flatform but 90% of the solutions whatever they're in the market are on the Sap net weer and this is where basis guys are working so far so that's why it is important uh any sap solution majority of them are on the Sap net weer this we will discuss in a detail and then you have sap business suit as I said it's a combination of Erp CRM and other or net weer based Solutions okay whatever they developed on net they packaged it and they Sol I mean sold it so these my and these are small scale Industries they already um business Allin one and all there we don't work regularly but just for your information this part okay so business suit just explained in the other so these are all components are combined in that CRM SRM SCM and PLM and then very good now we are slowly getting to the net weer so Sap net weer uh good so key features sap is support as I said sap business suit applications Erp SRM CRM PLM everything is developed on the Sap net Weaver okay as I said what is Sap net Weaver it's a platform when I say platform what all things it can do um you can develop sap products okay and suppose um you you have developed an sap system you want to integrate with non sap system okay or sometimes you may get request to make an RFC connection you know a connection or tcpip connection or your mobile application you developed something and you want to integrate with sap that is eligible possible if you have net Vier that's why platform means it is much more than an sap system so you can integrate nons solutions to this solution and you can develop the features using the app or Java so and you can bundle components okay so it has a lot more features so these are the few key key features so you can develop applications you can integrate non and you can also develop the industry Solutions what I mentioned Aerospace banking oil and gas which has a specific requirements so those things you can develop so that is possible with the platform okay one second so these are the key features of SCP net viewer okay so see this slide I mean in future when you are so why I put these slides is in future when you are applying for certification or something so you know in a nutshell I can explain you but it is important that the terminologist you know doing a job is different practically and writing exam is different so an automobile a car can be repayed by a guy who has not done an engineering and but I mean he with practice he will do that but if he wants to write an engineering automobile exam then he has to prepare for this one so if you want to go for certification but you have to understand this you know technical terms I mean use case if you want to build as I said net so if you understand the term platform then net weer becomes much easier for you I mean it is very easy to understand sap neter is a platform suppose if you want to build composite applications I mean sap and non sap applications so net weer can provide this feature sap composite environment that environment name I mean in a certification you may get a case let's say if you want to develop a noncomposite build different applications what module or the what part of the Sap net weer you will use so which is sap composition environment data warehousing as I said um if you want to store the data what do you use SAP BW this this part of the solution you use so integrating and self-servicing content with the netw portal for example end user so he will launch an URL and he will see the data I mean he will place orders so there that is the Net weer portal so that that is provided by the enterprise portal it's it's again a different product I mean see these are the building integration scenarios okay your Erp to the external world scenarios how do you do PO process integration now they call it as po so sap pii is the thing you and Mobility sa net mobile so so this is the like theoretical part what corresponding capability of sap netw can provide this particular use case this is the part okay now you want understand so net Weaver is a platform so it can provide these many capabilities or there these many features okay so now hope you get some glimpse of net weer okay so if I have to put it in a clean slide this is how I do so Sap net weer it's a platform it has security and identity management so you know uh security and identity management earlier Microsoft has this L app and others security this is also an important ident who who has to log into the system and who should access it so that PS also neter provides it a provision to provide control the security okay and then life cycle management so I mean for example Erp how do I upgrade when do I have to upgrade what is my latest religious so that life cycle management is possible and application foundation so if you are developing some particular application where do you start how do you do that so that part is covered in this one and then integration processes people composition as I explained this key key features so these are in a pictorial way I put okay good now you understood the net we now the most important part okay so sap netw weer application server okay this is where the U basis guys comes into picture right so you might have heard dialog instance application instance right or Central instance have you heard of these terms okay it's an AB abap system it's a Java system so these terms you might be confused so now I will try to slowly I will get into that level okay good Sap net weer now we are slowly getting into the um application server okay so you have a presentation layer sap GUI browser this is least bothered about it leave it so this component we are least bothered going forward I mean it's just an interface how you log into the system what part is important application Level so net weever as I said it can provide you can um provide abap system I mean Erp on abap or there's no Erp on Java some of them Java system enterprise portal it's a Java based system in process integration PA right PA you have this e plus Java systems okay so earlier they used to call the Dual sex systems I mean AB plus Java BW also plus but sa no longer recommends these dual stack systems okay so there's no point in learning it now five years back they disc continued it so don't worry about the some customers may have it but the if you understand Java and evap independently that should be more than sufficient for you to troubleshoot the Dual check system problems you got it so so there are two levels of SAP systems developed in application sap ABAB system sap Java system okay on Java base systems database it doesn't matter whether it is a Java system orap system they all connect to the database for database just understand that it has nothing I mean it will store the data from anybody okay so now Sap net weer as I said it's a platform right on the platform you have to develop something right how do you develop you need a coding language right so there are two develop two two coding language AB so abap is an saps coding language that we all know right so it's their code Erp is developed on ABM anybody thing is developed in a but when you say Sap net is a platform so that anybody non sap applications also should be integrated how do you do that so what is the other coding language with majority of the applications use Java so that's why on a plat platform only these runtime environments comes into picture guys that's you try to understand whenever somebody says it's a platform so there should be a runtime environment to run I mean code has to run python or whatever is it so in this case net weer platform has two runtime environments abap and Java when you say sap system abap system so it's an AA based coding So when you say sap Java system it's a Java based coding so these two things can um enable the Integrations to nonap nonap means majority of them are in Java so that will provide facilitate this integration scenarios so we are not talking about the other things as well net has those capabilities but 95% of the things comes into these two categories abap and Java runtime environment okay so now AB runtime so you know that just for your theory understanding thing ABAB is a programming language developed by sap that we all know so many business applications in the sap system they're written in the EAB okay so EAB has been optimized in such a way high scalable business applications if you want to scale out or um and customers can also use their workbench they can develop their customize or develop their applications modify the standard applications as well okay there's a lot of facilities so this about the basics of now let's come to the Java so Java also it's another mostly used Enterprise Edition uh Java So currently Java is taken by Oracle okay so earlier so okay first understand the Java then I'll give you the background um Java is a simple object oriented platform independent I mean irrespective of the platform net weer or cloud or anything whatever platform you can use the Java over there it's a independent platform independent programming language okay so it enables you to write the browsers web pages and these are all development related things you don't have to worry about it but know that Java is this and on top of it also people will develop their applications browsers or whatever it is so net weer facilitate both Java and E okay so future if you ask me the future of sap so slowly the Java will phase out sap will would like to kick out Java you know why okay give it just one minute take time I will tell you why because so that you remember this that in future okay I don't have to support these Java systems or they get rid of sap get rids of them okay I'll give you a simple example why see earlier Java is a open source okay I mean anybody can use like Linux it's a open source anybody can go to Google or so nobody owns it you develop your product you work on it that's it Java was a open source then sap thought okay it's a open source anybody can use it fine let my net also people also develop there but the problem is Java slowly acquired by the sap sorry Oracle why Oracle as I said in the initial Oracle is a competitor to sap right so I mean they both are competing each other in Erp module I mean in terms of the database also sap came up with Hana because to counter Oracle DB Oracle DB so they both are competing from last 10 15 years so what Oracle did is okay I'm not able to compete with sap directly on the Erp front Okay let me do one thing so all these components like Java all these parties third party modules or small small things let me acquire so vle has started this back B I mean they they have acquired all these Oracle and Java everything now what Oracle did they started charging sap so if you want to use this Java runtime environment you have to pay me you pay me the license and you take it and then they started charging exoit I mean too much of moneyy too much of price those licenses that's where the problem so that's why sap started uh okay I don't want your database Oracle please I will migrate to my Hana you see majority of the databases are migrated already in last four or five years now you see Hana database or the sayas cbase is also acquired by the sap so it's an Sab database right so now you get the Glimpse now you understand so sap will phase out this Java in future so what is the counter Fury so that is also in your course curriculum one day we will talk about the Fury Fury is going to counter the Java so that's the marketing strategies but understand this but still today majority of the components okay majority of them are with the sap I mean uh systems both are with evap and Java supported by netv systems okay still there but slowly in future after five years we will we don't see any Java systems or sap will come up with complete FY Gateway based systems like that okay so good now you understood that net weer two kinds oft systems and Java systems will be available sap system whatever you hear so good um this slide uh is not important for you right now so I mean so mainly client server architecture this is again useful for you when you go for an certification so Hardware oriented view VI means you're you you are a client and then you have a server so sorry they both are connected through Lan or wire so then that is the hardware vared I am a client and I will connect you to the server that's it that is an Hardware but in sap the terminology of client and server is different so client is somebody who request for a service and server is somebody server is somebody who provision of a service that's it it's a software oriented so don't get confused when you hear the client and server and this terminologies client means the one which you request the service and the server is something which will provide the service it can be interchangeable so it is a more like a process based architecture so it's a process one so leave about this client and server separately so process one will request for the service so that time you will call it as a client and process to will provide the service that time you will call it server so okay so that is the software oriented view so it's a process based architecture just remember this term in certification times they will use this one so sap is architecture is mainly based on the process based so process one will request for the service process two will request for the provide the service so three Tire architecture I've already explained so presentation layer so just a recap so because I I'm going to slowly to the instance level that's why I'm recapping again here presentation application and database explain presentation layer or the client layer information purpose if you are want to read it theoretically later so and then um database servers you have good so three TI architecture is done now what is an sap instance what is an sap instance so you you heard the term right sap system okay what is sap you understood as a company or as a product level okay leave about it keep it aside now we are slowly getting into the technical details what is an sap instance okay or if I have to put it what is sap system and what is sap instance what is the difference between these two okay and in sap instance what are the varieties of instances okay don't get confused I I'll clarify all of them in a clean way okay so fine this is the most important guys as a basis guys please pay attention on this slide I'm going to explain very cleanly on this topic as I said presentation layer we don't bother so it's just sapg the way you log into the system web browser you don't bother and this is the application Level okay and bottom three architecture database level database level also database is separate leave it as so here is the complexity or the important part application means we are talking about sap application okay let's take Erp okay so you have computer a when whenever we say computer a computer B computer C what is what does it mean it's a server let's you know for the simple City purpose I have put it as a computer so it's a server a server b or computer C simple understanding so you in an instance so sap system is comprises of all these components that's an sap system okay so sap system you connect through the sap GUI and then to one of these instances and then sap system connects to the database it's a package I mean it's a combination of all these three interconnected sap system it's when I say Erp system okay when I say instance okay so you might have heard uh dialog instance primary application server or you know secondary application server now that is the terminology I will explain next so application Level this comes into what is Central instance what is Central Services instance what is dialog instance okay Central instance um is something which which contains the your message server and NQ in abap case okay that's the central instance Central Services instance it is in the Java case they call it as a Java process Central Services instance what is the dialog instance let's say you have CI um Central instance and then you want to scale out you want to install the another servers to do the Computing and logical thing so you can scale out so you can install another dialog another dialog instance three four 5 six you can scale out so some some SAP systems has 10 application instances so application instances dialog instances they called synonymous don't get confused so they have or application servers also so the dialog instance and these instances are nothing but application servers okay you can have up to 10 or 15 or whatever is it based on your load and so that's the difference between sap sap system is the connectivity of all these things sap system and then instance is um Central instance has specific services like NQ okay and then we have the scaleout scenarios dialog instances and others okay that's the difference okay in the next I will talk about the only this sap application servers architecture that time you will get much more clarity on what is going to happen in this particular application Level okay what is the central s instances what services it has but now you will just understand that okay in my application level so this part is just try to understand for now yeah sample system landscape this have explained okay now we are going to um we understood what is net Weaver what is the landscape um I mean neter sap system sap instance and things what is the saps for Hana okay I told you I'll explain right what is saps for Hana okay so it is the next version of the P there were a lot of modifications done so Erp can be installed on any database okay you might have so you can install it on cbas database you can install on Oracle you can install it on db2 okay various databases are there so Erp can be installed in any database but sap what they did in 2011 I told you right they introduced Hana so sap s for Hana what does mean by S and what is fourth and what is this S4 mean anybody knows anyone what does this s S4 means Hana fine it is on Hana that's all right I mean Hana database so what I said is business suit I explained right business suit has what um Erp SRM PLM or SCM so it's a Next Generation business suit they are calling which means it's not a next version of the Erp Next Generation business suit okay so S stand for simplified suit for Hana they call exact terminology sap simplified suit for Hana so that word is very very important when you are when somebody ask you in a nutshell what is saps for that simplified term is the most important thing okay why because you'll easily understand what is this as farana so what they did is in Erp there is a too much of coding you know unnecessary coding and earlier coding uh too many lines or the rows the bigger the code and the expensive is your statement to F some so what they did is they simplified it that coding they have removed the number of lines okay so and then they have changed the it is on the Hana database right it is powered by the Hana real time so Hana is much more capable in terms of the ram resources everything so what they did is column based store right so the select can happen faster in a column column store when we talk about the Hana I will explain what is this column but now just understand that using the capabilities of Hana and the user experience of the the what they did is they have simplified the code if if I have to put it in a very crude way so they have simplified the code in such a way that it is much faster excellent performance and real time you can generate the reports and stuff that's what they did with this Hana that is why it's very important when you say simplified suit for Hana so earlier we had sap business suit which are Erp and all what they did is they have simplified it by adjusting The Code by removing the number of of lines by making it much more simpler and easily accessible and using the capabilities of Hana okay so when I say sap Hana so this is the thing it's very simple so I mean you don't have to bother about anything so it's just an Erp with red reduction of the code and optimization has been done that's it if as a basis Administration if you want to understand it if you keep this in mind and read saps for you will understand the whole thing whole scenario so in this saps for what all we have on premise Edition and Cloud Edition forget about Cloud Edition so that only sap provides um on premise Edition some of the customers have implemented it so Cloud Edition no support vendors like TCS and others won't support this xer Cloud until unless you are part of the saps team saps Cloud team okay and then sap Hana platform as I said it's also a platform so it will run on the Hana as a database you can do application extensions like uh integration with nonsp application and stuff and as I said right see see you pay attention I told Java's history right what Oracle did to Java they Acquired and they started charging so what sap is doing with sap Hana remove you see there's no Java here Fury so Fury is an HTML based and it's open source so sap is using the fury that's where you hear lot of terms of Fury and you know Fury interface and all these things so that it's in a nutshell replacing or countering the Java okay countering the Oracle so they have stopped supporting those things so this is the saps so now you understood saps architecture business suit and then neter and what is sap system what is this thing and saps for Hana architecture so now we are going to talk about the netv architecture of the SCP net weer application server so as I explained clearly net weer is a platform where you can develop AAP and Java and it also has the integration capabilities where you can integrate the nonp application okay so net we okay net weer systems means so this business suit systems right all those systems can be um installed on waterall databases so here you see okay this is what this one will uh technically explain you so user interfaces so Java GUI web GUI okay and then Windows GUI for example sap GUI the one you and you also have a Java GUI for example people who are using the Mac right for example I'm using a Mac and I I always have a Java GUI and then you also have a web based GUI so these are the presentation things so net provides these facilities languages EAP Java you see the screen Mouse pointer Java and relational databases so okay what all databases the netw Systems Support so net systems means Erp SCM CRM these things so they can be installed on Oracle SQL Server which is a Microsoft SQL based uh thing but Microsoft we Microsoft is one of the SQL server providers but others also mongod DV and other DBS also whoever is on SQL Server based concept they can use so then db2 which is IBM based database so you still find some systems with the db2 um some of the customers are still using for example banking as I said they don't want to migrate so they don't want to touch their data that's why they still continue and they will live with it for another 20 30 Years also okay but still sap has to support db2 so the latest version of the db2 is the DB okay and then Max DB Max DB is the sa database so cbase has not listed here cbase is also one of the sabs database and the important thing operating system so that's why Bas is very complicated so you have to work on any of these database based on the customer what database he has installed and operating system again he you know different permutations and combinations so orle and aex orle HP you see so you always get 30 to 40 flavors of combinations as a basis you have to work so oper systems ax um it's an IBM hpu HP based Linux but anything with uni flavor right those are all similar I mean Solaris OS 400 J Windows is the only one so Sab is stopped Windows also I mean they will stop it slowly the most important thing is you always try to excel in the Linux or the Unix operating system both are same okay if you know yeah X or hpu or solar or Linux anything su su is the most favorite one saps so all upcoming ESP farana all the systems or if you really want to learn Linux you focus on the Su Linux suc Linux that is most important and the hardware platforms okay the servers so Fujitsu HP IBM sunnd Del and in addition to that now we have the cloud providers right infrastructure providers like Azure Microsoft Google so they're also um that we have one two hour session at the end okay we will talk about these Cloud platforms also so these are the hardware providers okay so the so net weer or the net weer based systems have these many combinations or customers can Implement in with this any of these following options given options so yeah this is the most important thing guys the terminology what you use so 7.1 net weer uh application net weer 7.1 and higher so there was some changes so I'm think you still call cica right Central instance but Central instance is renamed to primary application servers so but again these terms are important but traditionally when we are supporting the systems you can use any name what you want Central instant you still people call but when you are writing a certification you will get wrong Mark okay so 7.1 So currently they call it as a central instance pass primary application servers so all the dialog instances scale out are the extra additional additional application servers as so this is very specific you'll get a question on this for sure in certification if you writing okay so the Java dispatch sorry who's moving this so Java dispatcher in the earlier Java systems the replaced by the ICM processes so the SDM software deployment manager what was using earlier it's been discontinued so the Java Central service compris a Gateway process so these are the key important areas changes what happened with the 7.1 in 2015 with the latest architecture okay so you always know about the latest architecture only don't go with the old because latest if you know the world one easily you can sync because if you know the world one then latest syncing is very difficult okay so go in a reverse latest to the back because the concepts are same only thing is naming convention they might have changed so when we say inap application so I'm going see I've explained the flow I keep reminding you this we understood sap business suit business suit Erp CRM and other systems they are developed on weer okay net weer has an abap application server and Java application server now we are talking about the abap application server okay so see these are the processes you have in an application server okay so Gateway ICM ABAB dispatcher ABAB dispatcher is the you know work process dialog D for dialogue V for update B for background s for school okay so the scalability you can do additional application servers AA okay as I said correct ter additional application servers so you see one two three here so three scalability you can increase them so Central Services instance again certification these questions are very important Central Services message even in supporting also so what does it has message server and NQ server so if you stop this Central Services that's it your system is completely down okay so when you are working on but if you stop one of these application see you have three application servers here if you stop one application servers still the system is up there's no end user impact so AB other two application servers can serve the purpose but if you start the abap Central Services instance you done I mean your system goes down so why this NQ server is so important guys anybody why this NQ is separated see you have dialog dialog thing but why you have only one NQ server in this system why why this is um put it in the Central Services one instance is specifically called as a Central Services and why we have put it NQ over there so good so fine I'll explain you so NQ is something which will take care of the locking mechanism lock you loged into the sap system and then you are making some changes so while you are making the change you don't want somebody to go and update something else over there right you place a lock mechanism the system will place a lock the process make a lock mechanism over there so NQ is mainly takes care of that locking mechanism so that only one person can make change at a one particular Point that's the NQ server very very important thing so if you mess up with that locking thing then system will lose the track of what is happening in the system that's why they kept this NQ server separately and that instance where this NQ is resding they called it as an Central Services instance okay so this is very important it is um High availability cases also you might have heard cluster scenarios so where you have an ERS server NQ NQ replication server Okay so why do you need only for NQ replication server because remember the term single point of failure why do you need one for what systems you need see here sorry somebody's talking so application servers they're not single point of failures here you see so even though if your one application server goes down you have two more application servers as I said but if your central instance goes down your entire system is down so if somebody asks you to put a cluster or a high availability what do you do you do you mainly pick this Central service instance because your message server is one server in the system and inq is also one so you need an high availability for that single point of failures okay now you you got this concept right so NQ is single process in the system and then message server message server what it will do so when you do log to the sapgui it will do the load balancing so which of my application servers are free which of my application servers has some processes free okay and waiting for the work okay for that this will do the central instance will do the load balancing okay so once the message server decides okay where my request has to go and it has passed to the aaps let's say take this one you take this one for example the first one here in this one so three layer right first service so my message Ser passes the request to the dispatcher okay hey you first one uh you are free take this then it will assign the dialogue and update and background and the spool whatever based on the request if it is just a user transaction dialogue and if it is a database update update process and background background process and school means printing okay so this is the first point so sapgui the moment you login the request goes to the message server message server will look for which application is free and then it will pass your request over there and then your dispatcher will take care of uh based on the activity you understand now okay now you have some descriptions here message server uh what it will do see communication between the distri is this is a technical definition but simplified things I understood mess server will do the load balancing dialog work process will do the requests um uh I mean based on the user transactions or simple updates or checks or things so it will do the dialog and then NQ as I said it's a locking mechanism and then Gateway service um between SAP systems I mean one system to system a to system B communication this Gateway so ICM m mainly uh takes care of the uh in Java so web based request comes to the system right so the ICM internet communication manager so it checks those things and then it will assign U for that particular task Java processes okay so these are the definitions of these processes but just try to understand this uh basic architecture so as I explained components of the sap netv abap dispatcher I mean once you receives the request from the message server dispatcher will pass to the based on the work to the dialogue school or update or NQ okay these are the main components of the neter application server so this is the Java architecture okay so you have in Java as I said there is no dialogue updates school and things it's a simple server one server two server zero like that so I mean you see yes yes like this so it's a simple I would say but you may not have too many Java systems uh I don't know based on your product or the customer but just know that so Java primary application server Java Central Services as I said here also same concept so Central Services instance have the Java message server and Java NQ server so wherever there is a message server and NQ server you just call it as an in sorry Central Services instance so all other instance are the primary application or the secondary application so ICM as I said right what will ICM do all the web based request whatever comes to the system ICM will receive those requests and it will assign the task to the Java server modes okay so ICM is more or less equivalent to the what dispatcher if you want to compare with ABAB ABAB dispatcher will assign to the dialog update on but ICM here will assign to the Java server node okay so Java base systems um yeah this is fine so this is same thing Java environment Java dispatcher so Java server process just explained here so you have an ICM that this is the old description but here is this is the latest so you have an host Java primary application server ICM and then server notes it's a very simple Java architecture is these are the information purposes so I mean uh if you want to go through as I whatever I have explained so far uh to refresh it abap runtime system it provides uh abap application service for an internal and external Communications so message server what it will do communication between the distributed distribut in the web Lo balancing if I have to put it so as soon as you log into the sapg request goes to the message server message server will commun it's a theoretical explanation here so same thing happens communication between distributed dispatchers means you have application server one two three four right four applications so each one has their own dispatcher and it will communicate to those dispatchers so which of you are free so that I can pass my request to you that's what so Gateway communicate between the different SAP systems so system a to system B system B to system C like that okay so and this so This Again a theoretical explanation so what have I explained so far what is the central instance and how do you distinguish between central inst this simple message server and NQ wherever there is a message server and NQ it's a it's in Central Services instance even in the Java also wherever there is a Java message server and Java inq it's a central service and rest all are like additional application the correct ter is additional application servers so so it's a Java Basics so Sun mro systems in 1995 they have developed it I mean in case if you are interested in the Java so basic Java applications and applets so it's not important for you so same thing so three Tire architecture here also presentation layer application layer and database layer so so Java application layer whatever I explained Java architecture you have an CI Central instance and then additional application servers and then D DB is fine I mean Java and EAP anybody can go to the these are all the theoretical guys so this is not so important I have explained already so Central communic synchron Java cluster so Central Services instance have the what what what it has so message server so message server as I said again communication so here inste of dispatcher it will communicate to the Java cluster so this part I will explain here so exactly so this slide will explain what all the theories so you have a request web so Java systems all the request comes from the web only guys There's No Sa over there web request so portal is the one example so web request so it comes to the Java dispatcher so I mean for Simplicity purpose Java dispatcher now what it is Java dispatcher I mean to compare with so here it is now ICM so in World System they used to call it as Java dispatcher ICM so ICM will pass it to the Java cluster node server zero server one server two like that so in Java server nodes will be there so passes to the request so Central Services instance is simply I said wherever there is an inq and message server that's a central service both inap and Java okay so same uh same thing whatever was explain you theoretically in that architecture in a more graphical or victorial way so yeah in case if you are interested in the um dual stack systems which no longer available okay this is how the dual stack system looks okay so the sap GUI and then the Java here okay okay so traffic comes in two flows two ways sapgui for the ABAB system see here you see ABAB system and then Java system and then web based traffic comes to the ICM first ICM will pass to the Java but in sabg it's a straightforward but dual stack system we no longer have it uh I mean very rarely because sap already requested the customer to split them so whenever you look into the systems you look into as a two independent systems one is a Time environment system or Java system so you don't have any dual stack systems okay so so okay now what all combinations of the systems which we have so sap web application server ABAB system ABAB based I explained and then two Java system you can have and ab plus Java you used we used to have it but now we removed it so these are all like just for your in case you are working with any old customer or the old one who are using this is helpful or else you just understand one and two that is more than sufficient and you can easily relate to the other systems so and Java so here in GUI okay you have these options okay so theme settings so I always prefer this sap signature theme I mean even the old versions or everybody can use this one or you can go with the default pod theme or anything I mean I'm just showing you if I mean there's an option to change fonts and the brands color settings and all these things so most important one is the theme settings so if the based on the theme settings that's how your sap screen will appear okay so let's say apply so I have applied it okay and the another thing is adding the system properties so this is already added okay so major do you know how do you connect to the sap system so here I have explained you the three Tire architecture so I'm we are talking about the lab one guys um but in this one um we will going to talk about U presentation layer how we are logging in so now you just understood how do you change the theme font and everything from the sapgui 770 is the latest version this sap log on so as a basis guy why I'm stressing on this particular GUI part is even though it looks very simple so some of the customers or the end users sometimes they complain you that hey no I'm not able to log into the system I am not able to log into the system you logged into the system and you check that sap system is up and running all good but the problem was they will be working on a older version of this one so 720 710 the sapg are discontinu okay so they may work they may not work so they say that until yesterday it was working today it's not working so as a basis guy you always have to tell them that which instead of you wasting time in analyzing so much first ask them which GUI version so this problem happens know for the people who are working on the WTS servers and remotely they accessing right for them they are using old this GUI versions so I've seen cases where the problem was with the GUI so you always check them so see any sap version the recommended version is the n minus one I don't know if you have heard the term n minus one so which means so 770 is the latest one always go with the 760 that's the best okay and you use the latest that's fine it's up to you but always the best is the n minus one as a safe side you recommend for anybody to n minus one version for example if you're applying a kernel always suppose the N minus one version because latest version might not have been implemented by many customers and sap Also may not have tested properly but the best part is go with n minus one so that many could have been migrated and you know in Google or help.sap.com you'll find the solutions for the issues okay so it's important you are in the right this one suppose if you want to connect to an sap system so when I say system ID here sap system so I explained you the difference between sap system and an instance so instance or the application servers they both are synonyms I mean they both are you can call anything but let's put this way so system ID is the e68 in this particular system so application server you can give the server host or the IP both should be fine you are connecting to one of the SAP systems one particular application server so here he has selected as a connection type custom application server so when you take the custom application server so it will take you to this particular IP application server if you take the message server group server or selection server I think he has not configured this smlg in this one group server you need to give the log on group that is the message server group so then it will do the load balancing so this is what I was talking the request will go to the message server message server will allocate the free application server okay but in this case we are directly connecting to the custom application server so if you if you have a load balancing always use the group server uh selection and then give the let's select it see so here you have to give the message server details this is what I'm saying so you see when you select the group server when you put the message server it will take you to the message server and then message server will take care of the load balancing which applications but custom application server you can give directly okay now let's go to the network so sometimes you have to activate the snc okay secure network communication so once they install the certificate they will give you the uh thing what you have to maintain here so p/ something so that data you have to activate and maintain that here then only uh the access will go single sign on I mean to say I mean you don't have to give the user ID or passw password when you are logging in so single sign on purposes you always come here and activate secure sign Network and they will provide you the um string what you have to maintain here okay code page ignore language default and encoding is ANC for all the unique so uni code systems so default an for uni code systems and you have so many this thing so I will explain you about what is this uni code and what is this NC so 99% of the SAP systems have the uh uni code systems and this ncn coding and sap got rid of the non-unicode systems and um they were migrated all the non-unicode to UNI code also okay but still some customers as I said banking kind of guys they don't want to migrate so they were still on the old versions of the non-unicode system that's why here there is an option but here you don't have to do anything over here simple clear now let's connect to the system simple so it is asking for the client so it's an ehp8 system you see here ID ecc6.0 ehp8 so so today we talked about all these architectures and stuff right guys from Tomorrow onwards I want you to focus more on the um handson that is is more important so it doesn't matter how much Theory you know and uh you know you can go through Google also Theory you will get anywhere but the thing is starting in the right direction and then doing the handson because the more you work on the system practical knowledge I mean to say the more you work on it the better you will be able to troubleshoot the issues okay so focus on the handson and moreover um during the session also whenever I'm spending time one hour one and a half hour for hands on for tomorrow onwards okay Theory I will give you the Glimpse and an understanding of the topic but handson is the most important thing because system utilize the system what is given to you for the next 14 15 days so in the hands during the handson I also give you some live trib shooting scenarios for example if some user logs out or some user get killed or sm37 back got failed how do you troubleshoot it when there were dumps how do you check it so I will improvise the handson also and based on your level of understanding and I will increase the difficulty as well so can anyone of you explain what is sap basis no server Administration is a different thing so here you see my screen server administrator is a different guy who will take care of the and then network administrator then you have a database administrator then you have a o administrator okay so if I have to put it in a simple thing basis guy is a doctor okay or general surgeon General physician okay so but basis guys can become experts subject matter expertise okay smmes they call okay in that particular area or the particular domain they can become but basis guy is like a general physician so first you go to the hospital whom do you meet first you have a problem whom do you meet General physician then he will assess your condition and he will suggest you to the right specialist right like so in this case I mean sometimes it will be frustrating for you also all the problems will come to you I mean this is something you have to live in day in and day out okay if you are growing in a basis guy I mean I'm trying to put it in a very simple simple things guys so if you want to grow as a basis consultant you should not live with the troubles a doctor cannot sleep with the patient problems okay he can't get sleep if he keeps thinking about patient condition I mean he his aim is to improve it but he can't worry or he can't think of it and then it will cause so basis guys life is like this so I have spent 10 years of experience in basis I'm an now still you can't live or you can't sleep on on a problem okay that you have to understand very cleanly I mean as a person I'm telling you so all the problems in an sap will come and land in your que basis guide okay so every time all the problems looks to you that oh oh my God this problem that problem this is thing so sometimes from the front end sometimes from the application layer sometimes from the DB but at any point in time all the problems lands into you so you have to assess the situation you have to assess the problem do the basic troubleshooting and if you think that it is a database and if you have a L3 database pass it to the L3 database after doing if you don't have DB then you have to upskill yourself in DB so if you think that it's an OS issue then you pass it to the OS gu then if it is a hardware issue pass it to the server if it is a network issue pass it to the network right sometimes Network restrictions what examples firewall if your firewall doesn't allow RFC connection or the connection to the sapgui what do you do nothing so you have to request your network guide to open the connection or the ports right so at any point in time the end users doesn't know anybody they will pass the ticket to your so you have to identify that problem and you have to pass it to so if you keep worrying about that problem and you don't get sleep in the evening believe me so if you think that you you had a big issue today oh my God I'm not sleeping no you have to give it up office is office you leave it and go so because basis is like this every day the moment you log into the shift you find one or two tickets in your queue which you don't have any clue I mean sometimes it will be repeated repeated issues won't happen so if the issue is repetitive then they will fix it right I mean they will fix it they will create a problem and then they will address it put the change in the system and they won't be so always you keep getting the new new issues basis guy so that's in a customer project at least so internal projects are fine know that so basis consultant is sap architect system architect so I mean he's the best guy to design a system for a customer based on his requirement you know what application um what servers Linux or which operating system to choose what database to be picked based on the customer requirement what is the database size and all these things he can become an excellent system architect transport administrator as I said developers will develop the transport they go and put it in the test system okay test system you you have to put it and then you put it in the production system so the moment you import the transport system is down who is who has to troubleshoot basis so you have to bring up the system first to avoid the end user and then you tell the developer a guy your transport has got so and so problem or I have to restore the system you know backup management so backup you have to take care of it so it's like sap DBA so and then security specialist so you have to restrict the authorizations to the specific people and batch means job monitoring so these are all interface analyst this is most important this is the most painful task so these nonsp interfaces or the nonsp systems want to communicate to your system RFC connection or tcpip connection so these connections you have to take care of these Integrations and then system administ simp so these are your day-to-day job as a basis consultant but once you grow I mean mean five years six years of your thing then you have the regular activities like upgrade of the systems ehp6 to ehp7 sap Erp to the saps for Hana conversion okay and then wdb migration some guy wants to change the operating system Windows to Linux right and somebody wants to Oracle to Hana so that migrations those are the big big activities so that will come as once you grow as a consultant and become a senior level but as a day-to-day life this will be your life I mean problems are always with you you know a doctor will never be free it's like this General physician you will be sitting in a hospital like or monitoring the queue you will be dumped with the issues you know functional issues this issue that issue but you should get the understanding or the glimpse of what was the problems okay so this is the simply simple this thing so what is the system architect will do what is the transport admin will do batch admin what you will do create manage and job things so the most important sizing of sap system designing of sap system architect I mean in your future when you grow you will grow as an you know if you like this basis thing you go as grow as an SCP architect okay that's the so you know layers so first you work as an admin and then you will be like a consultant who will execute the things and then you have subject matter expert so in this also you can pick the specializations so installation specialization migration specialization or the some things so you will be called as an sap basis for that particular area you know Erp or Java you can pick that specific topics which means you'll deep dive into those topics but as an admin consultant you have to have a basic understanding of all these things okay so system administrator what you do main currently might be majority of them are working maintain system health monitor the performance and tune the system performance setting some parameters that we will talk when we have when we have this session all right let's test your knowledge here's a question for you what is the primary function of the sap basis component option A managing user interfaces option b handling application logic option C administering the sap system landscape option D developing new applications take a moment to think and when you're ready choose the correct option remember each choice holds a key to unlocking the answer good luck type the correct answer in the comment section hey there ready to dive into the world of sap basis our course is here to guide you through it step by step in this course you'll learn all about sap bases it's like a tool shed for managing stuff from making sure we have enough resources to get them where they need to go our course covers everything you need to know from the basics to Advanced tips and tricks it's created by experts who really know their stuff your instructors are seasoned Pros who've been in the game for ages they're here to help you learn and answer any questions you have and guess what our students absolutely love the course folks just like you have found it incredibly helpful the best part it's budget friendly this amazing opportunity to learn won't break the bank ready to become sap basis Pro sign up on our page now for more info head over to Zar Tech's website stay tuned for more updates are all set so don't try to log into the system now so just focus on the concept this is also very important topic transport thing so which you may do as a basis consultant day in and day out so based on your customer projects first let's say if you are in an sap uh I mean within sap sap is your client so there uh this Auto Transport process might have been automated completely but if you are working in a client projects you know BP or any other client projects there definitely you have to work in on this transports yeah importing of the transports and changes you have to take it to the production okay so it's a very very important topic so at times you may struck in this process so understanding the basics is very important okay and also um importing and taking these changes to the production is not so difficult okay most of the times it's been tested and if it gives an error so you can always reach out to the developers that is fine that part is clear but what is important is the basics of how do you configure this in a particular system let's say if I give you the development system okay I'm setting the context guys don't think that I'm giving too much Theory setting the context in the Practical world suppose if I ask you as a customer or if there is a new implementation right they're setting up their development test and production landscape okay hey can you please configure my stms right so what do you do I mean what are the questions you may have to ask or the clarify with the customer or yourself how do you design the TMS configuration for that particular landscape okay so what are the things you have to consider uh to set up such a thing okay all those questions will be clarified in this session when we when we walk through this thing okay so it's very important uh this thing and I will give you I mean this Theory and understanding this you get it anywhere but the real time where you have to check when there is a problem okay what you have to mean the sense or the common sense where you you know by looking at the error what exactly on what location you may have to check that common sense you will build after completing this particular module okay especially in terms of the TMS configuration okay so there are some ter I'm going with the presented View today so the reason is there are some important terminologies okay in this particular definitions kind of thing which will help you uh it is important for you to know exact definition of those words or these things so that you will uh talk or you know when you are whenever you are explaining in your Cent meetings or somewhere use those terms in a proper way okay so let's start with the uh transport system okay the first thing whenever you are doing this transport right so you see this slide as it said majority of the customers will have this Dev qas and prod qas is nothing but quality assurance and some people uh I don't know if you have heard RTE RTE system some will call as a just test system some will call as an RTE RTE means regression testing so it is the customers uh definition so So based on I mean if it is more of like a too much testing they do RTE some will use qas okay so the den naming convention for the qas system will vary based on the customer okay it's up to them how they Define but the whole purpose is for the testing only so this middle one okay so the first one is the development and prod so this is the landscape path many of the customers will follow three system landscape this is so if I tell you five system landscape on top of this depth there is a Sandbox okay here sandbox will be there and sandbox development qas or RTE or the fourth one pre-production before going to the prod they will have one more thing pre-production so today if time permits I will show you one five system landscape the stms configuration in one of the projects which I'm working so I mean that will give you a better picture okay so since we are just taking a three system landscape so transport directory so what is this transport directory okay so what all things it contains for example if you are working on any uh project or in your customer thing right in your customer project now you have these systems so after this session today you go and see them okay in their uh in their in your regular domain thing right in your regular work so log into the system because you're not touching anything don't worry about it I mean you not you will I don't think you will have access also to do that so what you do is you go and check this directory trans directory so then you you'll get a feel of what I have explained today and this transport concept will be completely clear for you you know 100% you and you will understand how your client or your project has configured this particular thing so if you take the trans directory so you will have a trans directory which is common for all these three systems Dev qas and production okay so all of them have the same trans directory you log into the dev system and see uh usrp trans and then qas usrp trans production usrp trans you check the directory so all of the three have common directory and in most of the cases it is a common Mount okay so NFS or the export of the blog device or whatever is it that directory will be common for all these three systems okay so that you can you can make a note of these things guys what to be checked I mean so one thing in this sandbox system what I'm going to provide you can check there but anyway it's a single system one but it is also important for you to understand the projects where you are working uh what is the configuration they have done over there okay just check it out so when I said this trans directory is common right so as a basis consultant if somebody asks you to configure this TMS configuration in a particular land Cape so your first thing should be what network consideration right what what is the network consideration so do the all three systems are in the same network so then only you will be able to mount the directory I mean the common Mount or NFS so that part has to be clear for you so you have to place a request for this network team or server management team for to configure a common trans directory but the requirement has to go from you okay clear so and how do you define the sizing of this trans directory how do you define what size do I have to do that thing will be depends on you have to check with the customer hey how frequently the the transports you generate the transport is it monthly is it quarterly or some customers will do weekly basis also okay how many transports and what will be the uh expected size this analysis you have to do with the functional Consultants functional or the eers so if you generally take a three system landscape 50 to 100 GB is more than sufficient again if this trans also full then it also leads to a system Hung Situation or it won't lead to any further inputs to happen so you don't want to get into that situation right so discuss with them they say that hey every week I do 10 transports and each of them of size of 10 MB or 20 MB then you calculate accordingly and most of customers so the best suggestion which as a basis consultant you can give is ask them to use the NFS okay I mean Network file system so which mean that can be extended whenever you need okay easily suppose 50 GB and you already exceeded 40 GB and then you add the 10gb extra for that okay so that way you have to first check with the Trans and then you put them in the mount it on all the three systems Dev qas and prod system and ensure that that you have the right amount of space defined for that and you also keep increasing it as and when it is required that is your regular task okay so how do you know that uh where is my trans directory path okay so I'm just telling you that USR sap Trans in most of the cases you use it but some customers may use differently so there is a profile parameter which we will check it today which is called diore trans so if you go to the profile I mean profile directory that we will see so just check for the parameter Dore trans that will have the default path which is this USR trans and windows ignore it so very very uh less number of systems these days on Windows and it's waste of time you focusing on this windows so whenever you have working on a Windows just you concepts are same it just that the way you operate is different I mean instead of this Linux this thing but the concepts are same so there it is like sapm andr but irrespective of your operating system and stuff always check for The Dore trans so that you can also check in your Landscapes just go to the RJ 11 or rj2 so just check for this parameter in the display mode drore trans what has been defined then you'll understand what is the trans directory has been defined over there okay so now what does this trans directory contains so now we will focus more on this um uh black uh this one uh highlighted ones so remaining things also important but I will give a brief thing about them so what is this bin directory what is this buffer what is this data what is this coiles so at least you need to understand uh data and coiles part very clearly and then bin it's a simple uh Bin is nothing but in any way in server management or anywhere bin is kind of more like configuration related or buffer Sor sorry the configuration or the executables or the runtime related things or envs related stuff will be in the bin directory so just remember like this um each TP like we have default profile and then the instance profiles right I mean for as1 or as2 additional application servers each application server has its own instance profile okay like that trans Port also has a profile okay so that pfl that we will see in the system TP that naming convention is tpor domain name. pfl okay so this profile will exist on the particular thing so in this profile what you can see like any other instance profile you see the parameters okay here also you see certain things like um timeouts or UT related parameters what is my transport route what is my these things so that configuration pfl will contain those details so we can open one pfl file and we will see today okay so then buffer so what is this buffer so here you see this buffer directory so buffer is for each system so it contains the Suppose there are transports which lies in the queue which are ready to be imported okay which you have not imported but you have just added them in the queue and then which are ready to be imported so the those transports will be available in the buffer so the name itself says buffer which is like the transports which contains the ready to be imported so data files okay so data so this is the important thing sometimes okay let me explain the definition and then we will get into when when it is important to data and coil data part of the exported transport requests okay for example you have done some change in the development system okay so those changes will be where they have been tracked obviously the changes will go and sit in the database of the development system right so when you export that as a transport okay so those database changes will be calculated or created in a particular data file okay so you can go and check in your landscape also in the data directory you find lot of files with r it starts with r okay that's the the naming convention for all the data files it's a standard naming convention so at the end of this uh PBT we have one slide where I'm going to show you this R and uh data files and co- files how they look so R stands for the data file it's very important R files all of them so the data file contains the actual change or the functionality which you have introduced in that particular or the customizing which you have done in the development system okay and then coiles so what is this Co files so this contains the transport request information you know what kind of Transport type it is you know what are the object classes what are the import required import steps what what it has to do what are the exit codes it has to generate once the import it's more like an uh information or what we call like a structure kind of thing okay this is my transport and these are the object classes in it's a definition of that particular thing uh catalog or whatever is it you call you call it as a catalog kind of them definition of those things okay so that it just a definition and these coiles starts with the word letter K capital K okay you can check that so coiles are very small size I mean it's in KBS but the data files sometimes they are of size 5 mb2 I have seen the biggest transport is 1 GB size that's a huge transport but in general your transport request definitely not that much of size okay so it is strongly recommended to have uh the customizing or these things in chunks or a sequence of transports so sometimes you may get a request to do uh follow exact sequence 10 transports or 15 transports like that so that time it is very important you follow the sequence or else you it will lead to a lot of inconsistencies and it starts throwing the dumps in the system okay okay now for example if a customer um okay now the next question comes to you okay as a basis guy uh transport directory setup you understood what are the two things to be done number one uh uh first thing you have to consider is the three systems should have access to this transport Network requirements and then Mount this transport directory in all three okay number two okay how do you you do the stms configuration and then it will read it sometimes you may get a request right so the transport are not developed in this particular development system okay so they have developed in a some other projects or some other development system within the company okay how do you get those transports to this particular landscape okay so that times what do they do so that time they'll say that hey I have a system I have developed in this particular development system I want all these development to go to this particular landscape whatever we see here how do you do that so as a basis consultant they ask you to do that so what do you do I mean what do you ask for first of all anybody knows how do you get the development so in this landscape it's fine if you develop in a development system you track them in a transport request and then move it to Qs and then move it to the production so now the question is the developers do not want to develop here they already developed already so they don't want to repeat the same work again okay so somewhere some other development system they already developed and they ask you as a basis consultant hey I want all these changes to go to this particular landscape okay so first of thing is you have to bring them to this particular development system right so how do you bring them so bring them to this development and then you import to qas and production so anybody knows that is that is where it is important to understand so the first thing is you ask them hey how many transports are there okay so is it 10 20 30 40 so sometimes it is a huge um thing right I mean if if is a uh huge development if you take sap as an example Sap's development is a huge I mean within sap so because it's a development organization it's a production company so they develop they core is development for them there is no production systems okay for end user are the customers outside production is the most critical one for within sap development is the most critical one because they do development so yes that is one one thing if it is two transports or three transports what you can do is you can simply get those ask them for a data file and coile you can copy this to the development systems data and coiles directory so this is where you have to place the r files in data directory and co- files in the co- files directory or else it gives an error that's where you have to copy properly to the right directory okay that is one thing suppose if it is a use I mean so some 10,000 20,000 transports so you think that it is not possible to do that so that approach is different I mean it's like a client copy thing so you ask them that hey you do one thing you put all of them in one particular client in your development system okay from that client in this particular Dev system you create one more client here okay so create one more client and do a remote client copy then you get all the customizing whatever they have done here so and then you verif ask them to verify in this development system your coding and everything once this is ready then you can export them as workbenches or the cross client customizing transports and then you import to the Qs and production that is the secondary approach let's keep it aside so when we have this client copy and other stuff so I will get to that thing that is another approach I mean when you have thousands of transports like sap where the development is the core and too many things so that's when you can copy the you can do a remote client copy and then you can do that tweaking here in the development system but in general in the production thing you just have to copy the data file and coile and put them in the right directory okay so then another thing a log uh the grade one also I'll give a brief thing so this log directory is something uh name itself says so whenever you see some issues with the import or some errors in the configuration you always go to this log directory and look for the files so you get some clue what is the problem so sometimes the RFC connection might not be working and sometimes authorization missing for this data on coiles sometimes it says it says coiles missing so it can lead to the you know this all has to be with the Sid ADM password uh sometimes it misses the authorization right authorization for when you copy the files okay that kind of Errors it will throw in the log directory temp is nothing um temporary data and log files I mean during the input whatever the logs or the temporary files it generates it keeps in the temp so generally we don't touch this temp directory and as a basis consant you don't have to check this one EPS okay EPS is the important directory so anyone knows this directory so this this is important when you are doing the support package upgrades okay so for example ehp 1 to hp2 or ehp or you are upgrading from SP update of this basis component or sap or these components one patch to the another patches so you always have to keep those patches in EPS directory it's a download directory okay so sap support packages you always keep it over here that is in advanced level when you are doing these patches okay so sap names just for name sake information belong to the as per sap EPS so this is also comes when during the uh patching okay what are the download packages you have downloaded and those details will be kep in this sap names so the most important directories are the data and coiles so which is in during the runtime or the importing and Bin is important if you want to look into the configuration of how your profiles defined and stuff you can check that now again um transport sequence so I mean there are two things logically anybody can explain with the whatever we discussed hey you know development you do it and then this is The Logical so development to QE and then qas to the production okay that is fine so but yes you have a transport directory common for all these three systems Dev and qas and production so what exactly physically how the transport sequence follows okay when a developer create customizes or customizations once he changes he tracked under a transport how does it goes to the qas okay that is important so so this is the sequence physical objects three system landscape transport in the following three steps okay so all the objects in a transport that are to be released or exported by being database okay for example this is a development system okay so they have to be exported and then they have to copy it to the database right whatever the changes you do they will be tracked I mean in any system once you do the changes then that has to be saved in the database okay so whenever you release the transport in a Dev system release okay or when when when exactly the transport creates the data file and Co files so it's not when you capture the changes in your transport okay so you develop something in the development system you have tracked them under the transport request those changes are written to the database for sure whenever you say that I am good this transport is perfect and then when you release it then it starts creating data file and coile where does it create in the transport directory okay data file and coile will be created in the transport directory in the data directory and coiles directory okay that happens only when you release the transport okay sometimes they custom you know one of the issues so the developers will say that hey please go and import this transport in the test system okay but you don't see the the moment you try to import it you don't find the transport at all the reason is it doesn't have the data file and coile in the transport reception what could be the reason that guy has not release the transport simple so then you have to tell him that boss first you release the transport okay you release the transport it's his ownership and if he's confident and there also some approval processes I mean there are authorizations defined who can approve the transport development lead mostly so the development project has a developer architect or a chief developer so who will approve that transport verifying the changes whatever they has done because if anybody releases the transport then that causes problem right so that guy has to review whether that particular developer has followed these um development guidelines or the saps recommendations and they have tools also to do that okay so those things anyway not part of you but you just have a glimpse of what exactly they do those guys developers so this this so they approve it and then the data on ciles created to the transport directory so now if you want to import to the Q yes it's just share directory you can add that transport in the qas system I mean in stms and add it to the queue and then you just click on the import and then it gets imported so what happens when you import it so so transport yeah I'll ask you the next question let me let me come to this what happens in when you import you understand in the physically okay import means where does it go and write the change it has to write it in the database right so I'm stressing on the part database guys there is one important thing you have to understand after this so it Go and writes in the database the change whatever it is happened so that is what happens exactly physically when you import the transport so and then fine so your testing is done so what the testers will do they will test it in the test system okay perfect everything is good then once the testing team approves the transport they will ask you on a predefined timelines to import it in the production system okay transport is the one of the most powerful thing you know it can spoil your entire system okay so once you import a transport there is no no way going back okay overrate is nothing but I don't know who has answered it overrate is nothing but they will send the correction okay so they will send the because when you import the change is going to be return to the database okay once it is return to the database you have to manually go there and delete that entry or something then it will lead to complete inconsistency there's no way you can revert it okay so the most important part is transport is not reversible once it is return to the database so they can correct the code I mean they have to do like and manually they have to correct it and they can send the fix in the next transport okay so whatever it has messed up so it they can send a next transport and then they correct it that's it but there is no way that once you import it and you take it back okay and as a basis consultant you may face severe cases at least in quality so suppose they give you some 20 transports to be imported into the test system okay after import then there is a severe scenario that lot of inconsistencies when I say inconsistencies how do you know that there are inconsistencies so once you import the transports so what is the transport these guys have done some changes right to the correct code okay custom code are the modifications or they have changed the table structure whatever is it what is going so they change the saps code so what what is going to happen when I say in consistencies in the system system starts throwing dumps I mean st22 okay I'm not sure if you guys have ever heard of the transaction code we will check in the troubleshooting analysis but have this context when I say system is completely tossed up so sg22 it keeps throwing errors like anything t t t dumps those are the ab dumps so then it says DBS error it says syntax error it says so many things okay so which are all related to the corrections you know we can check it in the system later point in time but when your system is completely led to inconsistent that is what I mean so which means your system is not functioning as expected because you have changed the structure of the code or you have changed the EVAP code and these transports are not proper okay so I've seen one scenario so when I imported around 150 transport the system led to is completely inconsistent I mean it is unusable it started throwing dumps no matter whatever you execute and the jobs failing sm21 errors so many things so then obviously you you you are the doctor I said right they will ask you to do something what do you do in such case so yes you you have imported a 100 transport to your system system has led to the completely inconsistent State what do you do after that how do you fix it yes basis guy has to fix it here okay and only basis guy can do because developers cannot develop many Corrections 100 200 Corrections and send it to them so which means they realize that okay test system has completely gone so now we have to do something to bring it back so the most basic thing backup restore okay so that is why most important thing whenever you are importing something you always have to check for the latest backup okay so these are all the Practical scenarios guys so they look too much theoretical but you try to understand these scenarios they are very very important Theory I can expl expl you so much but these cases how do you approach with common sense is the most important thing so whenever somebody asks you to import some transport right so the first thing as a cons as a basis consultant what you have to do is you know that once you import this this change is going to hit the database and you know that it will spoil the database so I mean it could be that they have tested everything but as a basis guy you have to see whether do I have my latest backup in the system right so do I have have my latest logs available to do a point in time recovery in case if the Never Never underestimated transport one single transport can spoil your entire system okay so one single transport suppose that guy by mistake has put instead of defining a field name or the column name if you put a star right you don't know that command what he has incorporated by mistake if he has put a star some table and then start star thing you can't read that 10 pages of code also in that file in the transport file you don't understand so by mistake somewhere if that guy put a star over there by type or something it will delete the entire particular tables column right that's it system leads to inconsistent so I me then you you have only one option basic guy please restore the test system right test system back to the previous latest backup and then you ensure that you do a point in time recovery so there is an option so okay so so time I have imported this transport exactly to that point time you can rest that we will discuss how do you do this backup restore and all but you know this okay so transport never that's why I'm stressing so much on this practical cases so in most of the cases systems are screwed because of the transports only okay wrong transports or sometimes by mistake send uh I will talk to you transport routs and then the transport layers by mistake they divert the traffic from one direction to the another Direction and then the accident happens so that system will go for a toss then they have to do a restore and Recovery okay so just try to understand so here this is the transport sequence So Physical Dev qas and then production is the logical sequence what exactly happens is when every time when you export in development system what happens it will copy the changes from your development database to the data file and coile and it creates them in the transport directory when you import in qas it will pick the data file and coile from the Q transport directory because it is common and then it Imports when I said import actually what it is doing it is writing it to the database so same thing happens in the production okay this is important to understand guys so what exactly happen when you import it or export it okay good so that's the sequence for many because transports you don't do regularly right so db02 so there are very various reasons okay so db02 um backups you check the backups right daily monitoring okay whether there is a latest backup is there or not every day but again that is frequency Al defined by the customer based on the thing if it is a development system they say you know alternative days also fine for backup or weekly ones also fine because it's cost saving because backup again they unit a space and thing if it is a quality system weekly twice or daily some people will Define daily also for production daily for sure there should be a daily backup successful backup for production okay so this is one of the reason because you don't import the transport in a day in and day out but you will import uh weekly once or twice to the Quality so this backup can be using multiple scenarios for example Somebody went to the database and deleted something as a basis guy who has a DB access that time also there is only one option if you delete a table you have to restore the system right for example um if there is a hardware failure okay so then database doesn't know the status of it and it has led to an inconsistent State okay that time also you may have to store and recover okay uh or and this changes also for example in development also they recommend to have you daily backup because suppose if that guy developer is working today on a development and he knows that okay something is went bad then he has to revert it to the previous day backup so that is why um backups are mainly for the U restoring the system back to the normal State whatever is the possible scenario what I'm trying to say is but for the transport when you are doing it is important for you to check if there is a backup so sometimes what happens is backups won't run because of network issues or because of the backup configuration or so on so reasons there you know we do see right sometimes we don't see backups are not running for two days or three days so but when you're are doing the transport ensure that there is a backup for sure I mean backups forget about whether they are configuring it on for what purpose for multiple purposes backups are defined to restore and recover the systems but when you are doing a transport please ensure that there is a backup so if you don't have a backup you better wait okay you tell the developers that hey guys I don't have a backup and there is a problem and I'm working with so and so backup team and I have raised a ticket it is the same case during the upgrades also okay and another use case is why do you need a backup successful backup during upgrades right when you are doing an SP patching so when you are doing a support package or note implementation note implementation also it is very important yeah no implementation can be rewarded you there is an option to De implement but transport there is no option but whenever you are doing such activities it is always recommended to have a latest backup okay as a basis guy that is your core this thing what is your task is to bring back the system to the state where I mean anybody can spoil the system functional guy or the developer or tester or whoever is but as a basis guy you always have to this is one of the roles and respons your roles and responsibility as an admin or as a consultant or as an architect when you grow right as anme so what is your role troubleshoot is fine one aspect and safeguarding the system is your most important task as well safeguarding the system is in this kind of unexpected things so you always have to ensure no matter what these guys do I mean what these guys do in the system you always design the landscape in such a way that you can bring back to this particular moment for example if that guy say that my system has gone into a toss after so and so time so please you have to restore or recover it so as a basis guy you have to you should have already defined an AR ecture that there is a possibility that you could restore to that particular point in time okay that will be like a backup and restore configurations we will talk in an advanced thing okay how do you configure that what are the scenarios how do you define such an architecture but it is your roles and responsibility okay clear so any questions before I move to the next slide good so next um transport system so there there are some few terminologies which you will come across when you are working on this TMS or the transport configuration so number one is the transport domain and then you hear about the transport group and then transport domain controller so the system which which I have provided also when you when we log to the um system it will tell you that it is a domain controller and what exactly is it okay so good so a transport domain so here if you see in this screen let me explain you this screenshot this screen okay so I have this transport domain one okay and in this I have a transport directory you see the term Transport Group and then there is a thing called TDS TDC sorry which is transport domain controller so these are the three important things which you have to understand okay so TDC let's say Dev or test or production and then you have transport domain two again here you have one transport directory and then TDC and then you have a transport group two and then transport directory to okay so the transport domain is nothing but it contains all the systems SAP systems that you plan to manage centrally okay from this particular transport domain you can manage those systems for example you have Dev test and quality you can manage from the and if you have other region systems three more systems of the same landscape but they're in a different trans directory or different thing okay they may have a different trans those also can be controlled from the transport domain okay see you take the transport domain two example here this explain I have the here Transport Group One Transport Group two or the transport Dr One Transport so Transport Group is nothing but the ones which are Shar in the same transport directory simple if I tell you so the all the systems whoever are sharing the same transport directory or belongs to One Transport Group so here you see um transport di one and then you have Transport Group One Transport directory to transport so why I am giving this domain to example is for example take an example of Asian paints or whatever company One customer so he has systems across the regions okay few systems are in apj which is our region I mean Asia Pacific Japan few systems are in um Europe few systems are in America okay but they all belongs to the same landscape so they all have the each one has the transport D different transport directories why I'll tell you the reason so apj they have a data center in Singapore okay um am or America they have a data center in America Europe they have data center in Germany okay so and it is not recommended or it is not um ideal to create a direct I mean Network so what I told when you are configuring trans the first requirement is Network right you should have a common trans directory let's say you have three three systems in each region Dev test and production Dev test production in Germany Dev test production in wherever America all of all six are belongs to all nine systems are belongs to the same landscape but cing to the different region cust different region factories or customers okay so now the question is you one configuration you can do is you create One Transport directory here here so the first one the transport directory and then you define all of them nine systems you connect to this transport directory okay but what would be the prerequisite you need to have a common trans directory Network allowed so this trans NFS or whatever is it to allow in between this see one data center in Singapore and one in Europe and one in is so your latency will beod I mean your lat very bad latency you know latency in the sense uh um you know response times will be higher to copy or to do that thing and moreover it is not recommendable it's a security breach okay from one data center to the another data center it is not recommended to open connections I mean Shar the files for this thing that is bad and moreover if your trans directory that NFS file has gone then your entire n systems are going for a TOS right so to avoid that so that is when this Transport Group configuration comes into picture or the transport directory is different different transport directories comes into picture so what they will do is simply okay I have three systems in my apj you define a trans directory over here di one okay apj trans apj you define one and then Europe trans Europe you define same as all six are fine so each development system you ensure that there is a path uh for these transports to move over there you know via application or RFC connection whatever it is you can Define such things so you get them here and then you sync all these three development systems and then you do the transports from those respective trans directories okay that is the best thing so that is why you have this transport group or the transport directory this thing to catter such uh big Landscapes where you have you built a development system and first time you executed the transport uh stms configuration it asks so what it will do first so it will create the transport domain okay what is the domain which I have to do and then it creates the domain control it will ask you okay is this the system is a domain controller you will Define it as a domain so what are the systems you know what is my development system what is your test system what is your production system that you have to Define here and then it will Define the config transport routes okay what is my delivery route what is my consolidation route I will tell you what is the consolidation route and delivery route and then QA procedure configuration which means who has to approve okay I told you right so not all people will have authorization to approve so only the validated function so quality assurance approval means see developer releasing the transport development Architects has the authorization they are the guys who are experts and they will validate for their entire teams vment and release it but in QA also you have a functional lead who will validate that the testing lead who will validate all the changes implemented in the system and then he will approve it for the production okay so these are the three main important things when you are configuring the stms configuration okay so good now the important question where do you configure this domain controller or uh this transport group or transport domain what are the requirements so domain controller is the one so the transport domain controller I've told right what is the transport domain control so it is the one where all the TMS related controlling happens okay so if you want to delete the test system and add a new system you can do if you want to change the transport route you can do you can want to change anything you want to change some parameter you can do so transport domain controller is the most critical one so that is where your entire TMS configuration okay is defined over there okay so which system you use as a transport domain controller is it development system or quality system or production system anyone which system can be used as a domain controller Dev or test or production see when I said transport domain controller has the all the TMS related control right so adding deletion of the systems and import everything so then it has to be the high avilable okay and high security precautions and high levels of Maintenance these are the two important things it should have okay so then if you take it uh production could be the best for the domain controller okay so but production nobody uses production systems always have the high availability and high security precautions and a high level of Maintenance everything will be there production but no one uses the production as the domain controller because uh you know it's very risky okay you don't want to do such uh uh R&D and then deletion additions and everything from the production no auditing also there will be a problem because production you always have to go with the approvals and then the change implementations and there is two much of complexity to do anything in the production So to avoid that and moreover nobody wants you to touch USR Sab directory frequently until unless you are doing a patching and when there is a change request approved and everybody isre okay so you don't want to do these kind of things from the production so even though your production is high availability high security and very good system suitable candidate for this one but in general in any landscape development system is the domain control you can check it so you loog to your development systems in your Landscapes wherever you are working just execute the transaction code STM see here you say it says you are logged into an domain controller at the bottom can you see so this is the transport management system so this is what I'm talking so this is the ehh system and what is the transport domain it's domain eh8 so it is the naming convention will be like this so this you can check it in your respective landscape wherever you so and if you want to know what all systems it has in this thing just click on systemss so user profile Services my objects or you can check the import overview work list onput Oran system overview yeah here you can click for example in this it's a single system landscape I mean there's no other system so if you have an test and production it will show here eh8 and other system and then it will also display the role of that particular system okay so our display transport domain so these things display things you can do in your this thing also so this is the domain and short description of this domain and then management let's see and then workflow engine okay so this is the QA workflow engine is like local domain only it's an automatic user assignment when I was explaining this slide right QA approval procedure so configure transport routs so transport domain domain controller you have different transport domain what you have seen qf procedure configuration means this is what I was referring to so so who who can approve this transport approved by system administration to be approved by department or to be approved by the request owner so these are the three people have to approve if you want to take it to the next system okay they always have to approve so this this you can modify or the functional gu or developers will update this approval procedure okay so and then go back so you can do a quick uh connection display configuration you can do that yeah so you can see the status system is active that green light whenever you see the before also I mean if you just go back yeah so if it says status active this one is the active symbol and then this green whenever you have this which means the system configuration looks good which means the RFC connections and the mount directory the trans directory everything is accessible okay so or you just click on the display configuration let me select it okay so you see last Changed by so for example somebody has changed U some program uh something in this configuration you can see who has changed it sap start so which means first time when this system was built on 27th August the Whoever has built it has so I was telling you this profile right TP domain profile so like you have instance profile and the default profile so each transport configuration has this profile you can check it in the US rp/ bin bin directory if you go there you will find or you can see the directories also here so so this is the domain group and the Transport Group I was telling right this is the group group ehp8 okay so and then RFC addresses and user is the TMS ADM it's a standard user for all the TMS related it will do the um it is the user which they use so trans directory drore trans so you don't have to go to the instance directory to see this parameter so you can see here USR sap trans is the this one okay so TP version is nothing but the TP is the program which will do this transport thing so it is the t66 266 version okay so just you today's exercise also I mean Labs also I have given this uh what we call similar exercise where you go and check the uh thing I mean these kind of basic things so that you will understand how in your landscape apes or in this thing or you just click on transport groups yeah so you have domore ehp and within that you have a group eh8 as I said there could be multiple groups for each reason apj America and Europe so that time you have ejore eh8 Amore eh8 or _ eh8 three transport groups that definitions you can see over there and then go back good so yeah you sometimes if you add or delete the system you can update configuration but don't do this anywhere so you can simply do the connection test if you want you can do that see at the bottom it says connection to the system eh8 is okay which means this is able to communicate to this system for example you have a test system and then production system there also you can just simply check it and do a connection test if that connection is not working then there is a problem I mean you have to do uh something so what RFC connection so it basically so you may ask how does it communicate to the other Dev test system right how does it communicates so the simple thing is RFC connections whenever you initialize the TMS configuration for the first time it creates an RFC connection to the dev test system and then the production system and that you can see in the sm59 so there that that will take care the DMS configuration will take care of you see my screen right so these the TMS ADM eh8 using the domain eh so this kind of TMS uh RFC connections will be defined to those particular Target systems test systems or production system so this also could be a reason sometimes the rfcs doesn't work and there's a problem then you have to click here so it says yeah so log on is 51 milliseconds and this is perfectly working fine okay so okay in real time do you modify this TMS ADM this RFC connections suppose if it is not working what do you do so there will be other ways to troubleshoot it okay okay I'll tell you why that's why I ask this question like any other RFC connections right the above connections this test0 T9 these connections you can modify always okay I mean those are fine but these connections are automatically created when you do in TMS configuration you got it they are the autogenerated stms autogenerated uh um RFC connection so the best would be yeah you can try modifying it if it works fine but the best would be you always delete the existing transport domain transport configuration and redo the configuration you got it so it will uh you again so you delete the transport configuration that you can do but you don't do it in any other systems so htms in mostly mostly these things will never fail I mean these rfcs most of the cases that issue you may not get it so most of the times you get issues like data file and co- files do not have authorization or they are not with Sid ADM and they are corrupted sometimes because when you copy from other landscape to here right they corrupted so those things happens but we generally do [Music] not do this uh I mean touch these RFC connections so never ever try to do something over there that's why I'm saying so other RFC connections fine you can change something and then you can rever it but these RFC connections are autogenerated that's why you have to be little cautious whenever you are touching this TMS related stuff okay so anything in this TMS is critical guys so this transport roads if you change it that's it gone I mean one instead of one system it the transports will go to the other landscape and hit the other landscape okay so that is the risk we have when we are working with the transports I mean this part TMS but the display part you can check it in your Landscapes also and try to understand what exactly how it is configured in your resp landscape so sometimes you may get this kind of errors that is when you have to check the RFC communication but I don't think you this error will be very misleading that's why I ask this question whenever this R you get such an error what do you do exactly you check your smm and stuff whether the other Target systems test system and the production system are they accessible okay so if they're accessible um then you have to come and check this RFC with the connection test is fine or not or if there's any restriction at the Port level or something or um you can see um do a tell net quickly to the port of the target system or a ping to the Target systems okay if there is any network breakage that you have to do but this is very generic error so I mean never ever think that okay because of this RFC connection this is failing sometimes if you don't have the authorization also it will give you the same error okay that is why you have to check multiple things when such a thing when it happens whether it has right authorization these data files and co- files structur has been defined properly there is a program rdd imdp or rstp test okay that we will do that we can do uh testing thing so that will verify the um configuration I mean uh whether your TMS configuration is I I'll tell you after this that program rstp test that program okay I will I let know that program so there is one program tomorrow I'll let you know so that program will tell you that uh the are TMS configuration is completely fine yeah tomorrow while doing the recap I will execute that and I will show you that so I mean you can't go to the each section and do this right whether my TMs configuration is perfectly or not okay so that is a time consuming so if you run that program so it will tell you that exactly where exactly the problem okay if if if it is authorized missing it will tell you that authorization missed and if it has some um uh TM RFC connections are not working it will RFC connection not working and if the systems are not defined properly it will tell you the systems not defin I I'll show you tomorrow okay that report it's very import very good report as a basic you always by hearted somehow I forgot this one or in this system it doesn't exist so I'll try to import that report to this system okay in general whenever somebody is building the system that report will be imported as a post check during after you do a system copy your system build right there are post checks those reports will come automatically some of the reports okay so now we'll have what other things okay good creating the routes transport routes um so as I said it's like traffic signals this transport routes so you have Dev quality and production so you know there is a development route and then sometimes it's a consolidation route and then delivery routes okay let's understand about development roads okay the development is most important as I told you one example right uh sap kind of company whose main Landscapes are the development landscape I mean they have this consolidation and test but for them the most critical is the development because they do lot of changes and product development so in one system they develop and they want to take it to the other development systems okay then they will develop the uh this particular um development uh rad okay so in that particular road all the development systems are developed so one single development system they do the development and they will pass those changes to the all the development system via a transport route of development route okay and then testing also from all these development systems so you don't have to have 100 test systems Define two three test systems and then you define a route to that okay these are my it is like traffic signals my test system and then production also you you have a production system which of them have to be so that route has to be defined carefully when the stms is configured then only from so and so system source and Target through that route will go to the exact systems what you have defined okay by mistake if you change the route that's it the systems will go and deploy in another system and that will be problematic okay so that is very important and these routes um you can modify but never ever do that in any any landscape so it's very very critical okay that will spoil the I mean wrong transports will go and will Import in a wrong system okay then again you have to restore and revert it I mean revert the system so can you assume in sap um okay let me do one thing so this stms or the import of the transport can we automate or is it uh okay you have defined the routes you have development to other developments define delivery route and then you have a quality route and then production delivery route so can you automate the import of these transports or you have to do always manually yeah because these concepts are very important yes try to understand so you may work on automated also I have see sap right sap has uh thousands of development systems okay so thousands of development system assume daily in those development system how many many transport they create daily so they will generate minimum 10,000 to 50,000 transport in a particular day so there will be around 30,000 developers working on those development system 30,000 developers assume one guy creates One Transport also so which means 30,000 transports for a day okay can you do these things manually you got it what I'm trying to ask so this transport routes are the very very important and nobody should mess up with them so it is like if you see I mean if you're working on an sap project I mean TCS I think TCS is vendor for many sap projects so you might have sap system development systems access so you go to a development system and do an stms you go crazy okay there will be so many routes defined you know that yellow line Green Line Red Line Blue Line you name any line so that STM screen itself is like you go crazy so those routes are like wings like blood supply right what we have from the heart so there will be a Central Development system where the developers develop and these all transports will have to go to the multiple development Landscapes okay so 30 to 40,000 transports in a day it is not a small amount so if you have to do manually then you have to recruit at least some 5,000 bases guys so it is not possible to do manually so they do automatically okay that is where this transport route concept is very critical okay you define the systems what is my source what is my target what is the path this transport have to go that's it you establish it and then you define a they write a program in the system that you keep going so that's it as soon as they release they will come to the so you can schedule also in stms okay as soon as you can schedule and they will schedule the times and they don't schedule everything at one time because again it causes late can see and the network problems okay you your system might have a less number of CPU RAM and then we go for it also so they will do every 1 Hour 2 hours 3 hours the transports will be scheduled so they keep going keep on going keep on going okay but if you take so that's why you have to understand both the things if you take a customer landscape okay where customers like Nestle BP or Asian paints or whatever is it there you don't have these many number of changes or these many transport with the most important thing is in those cases controlling of these transports by any chance or by mistake also automatically the transport should not go and hit their production that is what they control is most important that is when they ask basis guys to import they don't automate even though there is a scope for automation they don't do it so they want control in every phase okay when a developer gives a transport they want control in test system validate it and then release it then Bas guy will go and import it so they want to have the feel because anyway there will be some 50 to 100 transport in a quarter so they don't want to take that risk of automation where there's no control and nobody monitors okay hope this is clear for you guys now right so yes you can automate the automate the transports and you can schedule them to import but in within sap I mean as a development organization they have these automated but when you are working in customer projects where they always go with this manual thing okay so now you got the glimpse of what how important these transport routes okay where their use cases so creating routes so simply when you click on this you have consolidation and the delivery route so it just that from which system you are taking and what is the transport layer and consolidation system to which it has to go and the delivery system also Source system delivery system is nothing but a production system okay so you can take this consolidation system as a test system here okay can assume that so delivery rout is just another import route the target is the delivery system for the delivery route it is just a naming convention guys I mean source to the production through this route I mean like through this road it will go that is what it is trying to say this explanation okay so transport process so release and Export first thing so as I said in a development system as soon as you have uh okay so guys uh take a five minutes break quickly okay so then we will uh reassemble and then I will recap this entire this transport thing okay and also we will uh try to do the assessment today here itself okay and then I will walk you through the labs is that clear guys and then we will see and be ready with your laptops 5 to 10 minutes break okay be ready with your laptops and the credentials which I ping you please try to log in okay good so I just show you one uh you know landscape I mean the systems which system which we have as you know training purpose is a Sandbox idea system I mean it's not possible to create multiple mean it's not possible to create a production kind of environment that's why you don't see too much of this stms thing so I'll give you I mean so that for your understanding purpose one system where multiple things okay I logged into this particular rdq Pi system you see domain p and it's a domain controller follow me guys okay so if I want to see the systems right systems overview see so many systems all of them are green okay which means all of them are active so you see system Sid is this and then you see the type TMS system type you click here nonap system it's a Java system why I took one Pi so that you see development andry ab and nonap Al so you get a clear picture so and then you put a place here it's a controller so which means domain controller so and then you see backup domain controller mhm so in such kind of critical systems right where you have an option to uh create a backup domain controller also but not many of them do it so I mean in case rdq or the development system is down so then rrq will act as a domain controller backup controll it's just that while you are doing a DMS configuration you just have to tick which system you want to configure as a backup domain controller you can give another system so what this guy did is he here development is the primary domain controller test system is the backup domain controller R okay that's how they defered you got it so and then this one it's a virtual system what do you mean by the virtual systems which means these systems are not at live so they will come in future okay so they have created the configuration and be ready with the everything so once these systems are ready they will go and update the instance number and those details in these systems let me not it a production landscape so they will update it and then these virtuals will become the actual systems okay so production systems they are to build so for now they have created the virtually okay just understand that aspect that should be fine for now so these are the groups so here see you he has multiple groups group a1q group AQ group rdq that's what so that is fine each group has its uh own um trans directory okay so now the another thing is what you have to is might be interesting for you is the transport routes all right let's test your knowledge here's a question for you which of the following is not a key component of the sap basis system option a database option b operating system option C application server option D web browser take a moment to think and when you're ready to choose the correct option remember each choice holds a key to unlock in the answer good luck type the correct answer in the comment section so if you guys understand this one it is very easy guys so development but don't try to change anything anywhere just you can see it always so this is the development and Via this transport route so they will come to this particular uh system okay and then 001 client okay from this client to test system this is a test okay uh they call it as RTE some people will call it as an RT I told you right regression testing or qas so rrq is the development rdq is the sandbox it's a five system landscape guys so it's very interesting see this so now if you understand this then you will understand three system easily so it's a Sandbox okay rdq so and then you have this um no no development only development sorry sorry development so it's a development from develop m to the uh RT system rrq is the RT system okay so delivery roote this is a delivery road and it comes to the which client 001 client they will come and from rrq they will go to the pre-production you see here PP means pre-production pre-production Ur pre-production AMS so they have multiple regions so all go to the 01 client and hit there reproduction five system landscape sandbox is removed from it but four systems you can see Dev RTE and then pre-production you see this one this yellow ones pre-production and from this pre-production it goes to the production through this 001 client and these are all virtual targets because they have not built these systems okay once they built and they will replace this well so this is how your transport routes and then the transport layers looks okay and then the other report I was talking right where you can check the um if you go to the sc38 so how do you assess that my first thing you have to do whenever there is a TMS related issue run this report rsdp test so this report I executed correctly only in that system this report doesn't exist over there but in most of the things it will execute so you see here it will check TP interface everything is tick tick tick tick so it will tell you where exactly the problem is this is very important by heart it or you note it down somewhere rstp test is the program sc38 so it will tell you the transport directory is this log everything looks good and then it will also check the transport profile so the path of this is this profile is this version is this everything is green okay and then RFC destination so see this thing if you want to check it manually you assume that at least it takes two hours and you may not may or may not check properly okay always run this report whenever there is any stms or TMS related issues okay please very very important report for troubleshooting destination all good TP path good executables path good ping ping everything good TP call all good so TP test DB connect whatever you are saying that I I'm going to check this HTTP smm all these things so this destinations and connections works fine right so which means everything is fine you don't have to check anything manually so this report is very good and it always has to be green guys okay so good now I have shown you this let me disconnect it from so transport process so it is the first thing in Dev system you have to developers have to release and then they export whenever they export it the data file and co- files release whenever they release the data file and co- files creates in the transport directory and those data files and co- files will be available for all three systems via the trans directory okay and then import into the quality assurance which you can do manually basis guy and then quality assurance or the functional leads or the quality people will validate the change whether it is proper or not then they will Define into the the production okay so one important thing guys so I'm not sure if you guys aware can you make these changes to the production as and when you wish what will be the process so in your projects what process you follow whenever you want to import your transport to the production sometimes these developers and these test people right they will push you hey please go and improve my lead has approved my manager has approved please go import it production you know that pressure will be there but as a basis consultant you know the consequences right any wrong TR goes to the system you have to restore and recover it's a very bad thing so in most of the customer projects guys most of the customer projects there is a change management process okay it is important for you to know this Al change management process which means uh irrespective of whoever approves manager or not those approvals are invalid okay I don't know in your project this change management process is there it will be there so this change management process means so these developers or the testers developers mainly they will explain about these changes you know so and so changes and these are the implications and we have tested in the test system okay and then they will give the justification to the change management team they will approve it there is an approval team okay CR change request so most of the transports whenever you are importing to the systems right there should be a change request okay have you guys heard of this incident service request and change request at least so for a patch upgrades or patch things and all you need a change request right for installation or something so this transport comes into the change category so never ever do the import of the transport with just an incident or service request okay please validate the process with your Whoever has defined these processes right in your projects so it's better to understand and import rather than in a hurry just import and cause a problem for this okay because these are very very important most of the times these transports goes to the system via change management process okay ensure that you always have an approved change I mean by the resp authorized people then you validate it and then you import it so that after that you are just an Executor and you will tell that hey I have gone through this change management process and then I have imported it as per the on approvals so you are always safe if you don't follow that and then you just import it and then later people will ask whether have you followed the process or not so that is very important so whenever you are importing into the production you always follow the change management process okay especially for the transports you have to be little bit careful Import and Export history yeah in your Landscapes you can simply check it it's straightforward so follow the screen stms overview and imports go to history and Export history I mean what were the transports uh um imported or exported this data you can check it in the system just for your understanding purpose these screens have been created and exploring U export in sc01 um if you just give the transport number then it will give you the details of the transport so it's in a similar way so who is the who is the person who has imported it and what whatever the details of the change okay and then exported operating system okay this is important I told you right data file always start with the r coile always starts with the K so either you Bart it or whatever is it you know this thing so the moment you see it you have to identify okay it's a coile So Co K just remember like that I do that Co K so it start with k data file remaining one is R so that you don't get confused so in data directory these files will be there in coile directory these files will be there okay and then yeah it's an st Ms tool okay it's simple so Rd mpdp you don't use it I mean it's very rare but no need to do anything over there so only the or experts will try to troubleshoot it after if there is some issue with that okay just know that there is a program RDM dmdp Whenever there is a program import errors or something then we execute this particular report okay so yeah this is to just to let you know that there automation so there is an option in stms I mean you should not that we always do it manually even though majority of the people do manually but there is a time and date of the UT so we can do that periodically when and what time we can import it this thing okay so these are all for your U exercise purpose I mean how do you import it suppose if somebody ask you to import it you just follow this sections okay so import request and select the request so it will explain here I mean but because we don't have this transport request to import into the system but you note this down this slide number or somewhere in future if somebody asks you to import it you follow this sequence so here you go there and then import so you transport number you give here okay and then Target system it's a test system suppose if it's a test system so in this case it is ft3 and as I said Target client 001 or this one so start date immediate just see these guy options guys just try to understand these things so it's very simple stms import and immediate means uh if you click on execute it will immediately execute and then I said start date right planning you can do at start time what time you want to start and planned start and no start after and sometimes you want to exclude during a peak hours okay for example uh apj system so morning 6 a.m. to afternoon 2 uh 2:30 a.m. they will be very busy so which means you mention this this time and apart from that time you import it anyway so that you can do so after an event this is also important so sometimes these developers will create an events okay so which means after so and so code Corrections have come to the system you proceed with importing so and so things or after completing so and so job in the system you proceed with importing of the trans that you can do that okay so uh I mean maybe in certification these questions may come so what are the options where you transports can be imported immediately you can import at start time plan start time and then after an event so after an event many people do not know so just know this as well but very rarely we use it plan start with sap landscape they use it but immediate is the when you are doing it manually okay so screenshots of the import process yes so here um when when when we do this right so it will give you the statuses okay so right hand side this Legend I'm talking so green status means request awaiting to be imported which means you have to click on the import I mean these are the statuses you you find suppose uh okay so let me put left hand screen this one is there any Zoom option so you see here green green means this is ready to be imported tick mark means so this left this screen I am talking guys so tick mark means it is successfully imported successfully imported successfully import this transport so what is this truck button Whenever there is a truck button which means the transport is running okay whenever something is running don't bother it so you always wait for it to complete okay as I told you these will go and write in the database and it's very problematic okay so and then what we have H so there are other statuses here request must be still approved request was rejected so this kind of symbols so and there is a red button here third button request will not be imported so if you see that thing which means that it cannot be imported then you have to inform to the I mean inform to the developer so Q controlled Mass transports so this this is what something sap follows I mean when they have 10,000 3,000 transports 30,000 transports to be go and then single transports and one by one we do workflow control is set by defaultly set by the our stms these are the strategies what people will follow this one TP program rstp test okay or in the discussion I will do rstp test in your Landscapes you can execute this [Music] rstp test this is the program sc38 sc38 c38 go there and then execute that particular program so oh sorry okay so I have showed you right in the existing landscape so it will check many things so your transport directory and your R3 trans is working fine or not so your uh RFC connections working fine or not and then aab communication so you don't have to and your profiles are defined correctly or not and operating system level do if you have the right permissions or not so this is a TP program so what we are doing is RS TP TP is the program transport control program and then we are testing that is the report okay so that will take care of your entire R TMS configurations check so it's very important so you will definitely have questions on U sorry net certification if you go for it they will ask you what is the program you use to check for the trans entire TMS configuration RSP test okay or TP program you have to transport control program is the program which you use okay and checks for buffer also then release and Export calls TPA web good why change and transport system I mean let's try to make the sessions from today and tomorrow onwards more Interactive you guys so try to be isolate yourself and then um have your phones or whatever is it unmute and ask and there's no point there's no good question or bad question so you please free to ask any question so in terms of the basis it could be technical or non- technical then I'll try to solve it because it's very important in this 40 hours you know after this you should feel confident about approaching sap okay or you read or go through it uh in a right direction so that you you frame your career in basis domain and then you'll become anme or architect okay so that you don't want to go in the version of this sap projects and then you will get lost okay so so far what we discussed before I move to the non uh non aab transports anybody so all of you are comfortable with these terms at least I mean where to check what to check and stuff so you can build on top of it overview and then now you got a glimpse of then you read anything you'll understand you go to Google or help.sap.com or anywhere then you will connect it and you go to your systems in your own landscapes in your projects open development system it's not risky also I mean you're not logging in in production go to your development system and see what is your TMS configuration how it is defined can you see those directories what I've said in OS level if you have OS level access okay open the TP profile just do some one hour of exercise you know so that next time when there is an issue with the TMS then you will be the Paka you will solve it I'm damn sure of it okay but for today after this you go through these things and then tomorrow you come up with some questions on it okay so the so far what we have discussed okay are all evap related okay transports so these transports everything is developed in the EVAP abap system and then they were captured in a transport and that transport is we are taking it to the uh production I told you neter platform right so it has a capability for non as well right and you have Java systems also Java runtime okay how do you manage uh I mean we don't have any such systems now because we do see very rarely this kind of configuration but theoretically I will cover you so that if you find a system then you get some background of it okay so there is a CTS change and transport management system okay so sap has enhanced the existing transport system for the non abap objects okay so non abap objects can be attached to your transport ERS so in Portal use case deployment takes place using no good so what happens is these non transports in an particular order they will arrange it and then they will give us the files to deploy okay there is a specific deployment option in NWA so you have to log the Nawa and then we we have an option to import those transport those XI objects or J developments okay or sometimes they will give the deployment files okay so either you use the CTS Plus or we also do a tnet you know the customizations or that is deployment files okay I don't know if you heard of tet so with that also we can do that so this change and transport system is CTS is enhanced version of the transport thing which can enable or which has the capability to import abap or sorry non abap J2 development or the XI object transports this is the tricky part so here you need a Java stack and an AB stack if you want and then here also most of the concepts are similar you have a domain controller you have if I find any Java system where this CTS is configured so if I show you that then you will understand it all right let's test your knowledge here's a question for you which of the following is a key task of an sa basis administrator option A developing new abop programs option b designing user interfaces option C managing system backups and restores option D implementing business logic take a moment to think and when you're ready choose the this amazing opportunity to learn won't break the bank ready to become sap basis Pro sign up on our page now for more info head over to zarch website stay tuned for more updates this is also an important topic uh users user groups authorizations roles profiles you know uh many things so uh it's a very uh important topic you even though you may feel it it's like a security topic but still it's very relevant for the basis guys okay so nowadays if you see sap they are not no longer separating security and basis uh separately so earlier we used to have a security team separate team who takes care of these users authorizations and stuff and Bas is separate okay but uh if you see last three or four years onwards there is no separation of basis and security and it's they both club together and they expect everybody to comfortable with this kind of authorization concept and moreover it's very important for you some of the uh users you know like for the background jobs or the admin users and something you need to understand what it is actually so that's why this is also very U theoretically and practically in both ways this is very important um you know we do some handson today uh creation of these users I know you may feel very comfortable and you may feel easy but still I would encourage or request you to do do this exercise because it is very important to have you a clear understanding of these Concepts okay and the definitions which I put it over here are also from the sap book The purpose is I mean at least if you go through this uh entire content of 40 hours which I have prepared so you may be it is easy for you to prepare for the certification yeah at least I can assure you % okay remaining things as I said it's a 3,00 700 page each book contains okay so each book has the 700 Pages it takes a lot of time for you to read but in this 40 hours I will try to cover the uh screens where you get the questions and where the important topics okay the screens exact replica and the content is also same exact same from the SCP books okay that is why you just try to read this content or whenever I'm trying to explain I will put this explanations or the definitions in a clean way so that you don't have a different because you have seen the questions how tricky they are okay and it's not also it's also not about the questions it's also about the correct using the current correct terminology when you are presenting to somebody or when you are talking to your client as a basis admin you should have a clear understanding of the U concept and the definition of it okay so let's start with the user Administration and fundamentals so when we say user Administration okay so let's check the diagram first okay so what all users you can think of yeah can can can you please tell me what all users you can you came across so far have you so some of you have already logged into the sap system right so what sap users you are using in your day-to-day work so okay these are the um application users or the front end users sorry front end users so what so it's a three Tire architecture right I said okay so I mean what users you are talking about is the SCP GUI or where you do on the front end so what about the application server users have you ever logged into the server so in the login so which user you mostly use on the server to do any admin activities on the uh server that is one user obviously that's the most powerful user so where you do the entire so root is there it's very powerful you can create an SID ADM user so all the application Administration happens with Sid okay so good so on the server level and database have you heard of the database users any any database user you logged in exactly okay user orid and have you heard of the schema user so and then you have this system user so that is again for the system admin okay good so so you have some understanding of these uh users so let me elaborate so sapgui which is front- end users okay so who are all these guys front-end users so the guys like developers testers and you as admins and then end users okay so there are many users we call them let's put it an sap users okay so let's take that as a front end users all of them and then you have the operating system users so operating system is only you as a basis consultant have the access okay so no one else will have that server access so that is where I I told in the initial days that all three layers in a three Tire architecture a basis guy have the complete picture so that is why there's no limit for you to learn I mean you can learn anything and you can become an in any of these areas okay from the application side or the this one so in the server side yes sadm is the most powerful user and along with that there are some other users okay for example administrator user in Java case okay where you do the uh uh patching and stuff and then the other user is like da agent da user I mean or the soulman related okay so if you want to do the fetching of the server uh da ADM they call okay currently they call Da ADM earlier we used to call them as SMD ADM okay so that has been gone now we call daa ADM so which will collect the data from your server through host control and it will pass it to the solution manager system which solution manager is nothing but if you don't know it's a monitoring system I mean mainly you use the solution manager to do the diagnosis of the problems or the root cause analysises and to fetch the data how the system is performing how it is performance so to provide such a data to the um uh who is the solution manager there is a different agent which installs with the da ADM so once after this we will see in the system how many system users uh we have configured or you can just go to the uh server and give a more/ etc uh password PWD you can see the users what are listed over here application Ser users but for you it is important to understand only the Sid medium okay and it's how capable it is okay and then database server so in the database layer you have uh so many DB users but as a basis admin for you the most important one is the system user I don't know if you ever logged into so Hana studio and then this um mainly in Hana so system user is the one of the powerful user so with which you can stop the system DB I mean to say you can stop the DB you can take a backup of the system you can take look at the logs you can change parameters for example uh Hana parameters from memory increment or decrement or tuning those ini files you know where you want to change the backup directory structure Etc so those parameters change backups and then stopping and starting so you can do with the system user in database server so along with the system user there are so many other users as well for example schema schema user is the most powerful user in database so don't try to log in with that I mean if you have a system access use system user but avoid schema so schema is the more powerful than system okay so you can completely Wipe Out the entire database using the schema okay schema user is something which will write the uh data or the um to the tables okay so you may say that I have 100 users okay I mean front end okay and then those request comes to the application server and application server basically processes those sorry process those requests so do does it mean that all these 100 users whoever logs into the scpg will go and write in the database no so all these process I mean all these users request will be handled by the work processes dialogue background update and so on so so only one at one user will write it to the database that is schema okay that's why I said don't so I mean these all 100 200 users who are doing the application logic will not go and sit in right on the database so all the request will be collected by this work process work process from work process that data one particular user know schema or in different databases different users are there I will talk when we have these database Concepts in day 12 or day 13 I will give you clear picture of what is that user and how it is going to pick the data from these work processes and then write it to the database that I explain but here what you need to understand is not all the front end users 100 or 200 will go and access the database okay so from application that work process Will C the service to these users that's it so as an end user he will the work process will take care of his work and one user collects all these information and write it to the database okay concept of these users okay now let's try to exactly meaning of this user okay the term user usually means user ID what is the user ID uh user ID means the ID which I have provided you TCS user 1 TCS user 2 TCS user 3 like that so up to you if we have 12 users so usually means that particular user ID so people log on to the operating system or a database or sap system using a user or password combination obviously you need to have a user and password combination okay so as I said operating systems uh which is operating system users I mean Sid ADM and then da ADM and these users have a different authorization concept okay databases also has a different authorization concept for example schema system and then back users also there and there are different in Hana if you see there are 30 to 40 schema users I mean whoever is working on that particular domain they create one particular schema and they will put all the tables under the this thing and there is an xsa admin so in database XS admin means the guys so the developers can directly access the database so without coming from the sapg so in Hana as I said it's a platform and sometimes the developer Hana developers may need access to the Hana database directly without going through the application because they develop some functionalities on the Hana platform for example reporting or models preparation and so on so things okay so that time they directly access to the database using the that particular user whatever is again so what you need to understand here is so the front end users which goes through sapgui and the operating system users which uh Sid ADM and the database users so they all have a different authorization Concepts okay so the front end users has this you know TCS user one if you go roles and authorizations are different and then the Sid ADM has a different authorization concept at OS level that is okay that concept and how do you put permissions and what authorizations you have to give there that is more relevant to the operating system like 77 Tri 7 permissions or 755 I will show you okay those those authorization Concepts even for the DB also it is different so DB also what is this read access write access or update access I mean if I have to put it in a simple thing so in database what all things people can do you know three mainly three things right either you read with a select quy okay some people uh some users suppose you are fetching the data from the Hana database and then you are preparing some reports in a third party application so that time I don't I don't want to give you the complete update and uh right access right so that time you just give the read access so he will do some select commands on the Hana and then he will fetch the data and his application populates the reports third party applications so that way that authorization concept is a little different and then right so some guys will keep pushing the data from their mobile or you know some application where people more like media so where they will snap or they will track something and immediately they want to put it in the database so that it will be available for everybody okay such cases only right access is more relevant for them so like that so very uh so all these three layers have a different authorization concept okay so as I said if uh the the third one if a user or password combination is created in a sap system so this does not mean that you can possibly log on to the operating system right with that user and password combination I told you all the thousands of end users or the users who are in the front end GUI are not logged into the application server server level or database level because that has a different user and different combination of users and passwords it is possible that identical user I mean so same user like TMS ADM IID ADM user I can provide in the front end also I can provide in the application Ser that is possible it's a minor comment that's what definition purpose so you got it all three layers have different authorization Concepts or the different way of handling the user request so as I said the user requests are processed by the work process that is what here mentioned user request sap work process these work process all use a common user so that's what I mentioned right not all these users go and hit the database common user to access the database now the next important question okay now for this topic let's remove the uh for Now application server and database so we we are not covering the the uh bottom two layers okay so in this today's class we are only talking about the the front end or the sap GUI through which you log in so this application server related once when we have this W Concepts operating system concept that time I will explain you in detail what all the users how the directory structures and what permissions you have to set and how the authorizations you can segregate there and same when we are talking about cbas database or the Hana database I will explain you in detail the user authorization or user management Concepts over there so for now today's class so you just understand the basic concept of this user Administration and then we will focus only on the front first part front end okay now you may ask the question so in any system you have clients right I mean uh triple 0 client and then you have 001 production client and client numbers varies from customer to customer 001 02 003 or 100 200 or 800 client which you are logging in right so different different client you have in a system okay so again what is client and how these clients are segregated I mean how which client to use and what are those roles and responsibilities of that particular client so I will explain you I think in day five or day six we have a session dedicated session on the client okay for example now you try to understand that we have only 800 client in our test demo system which we have given you so that is the production client just imagine like that it's a production client I mean where you work triple is the admin client so just know that so only the admin related works you can do from the trip Zer for example license installations and then yesterday TMS configuration which we did right so those things you always do from the triple Zer okay you don't do it from the so client dependent means so the users what you create I mean TCS user one TCS user 2 TCS user 3 you can try so I create you you try to log to the triple Zer you see if it works or not has anybody tried see I'm logging into the client so I created all your users TCS user one or TCS user 2 in the 800 client suppose let's suppose I change it to Triple Z and then I use my user EST user one I mean this is the one so if I try to log in it doesn't work Cent name or password wrong so what I'm trying to say here is so all the uh these users what you create in the frontend or client dependent okay so if you create them in triple 0 they in triple Z only if you create them in 100 they work in 100 only okay so that is very very very important thing I mean for your practical purpose and this one so the entire front end user Concepts okay they're all client dependent okay so in one uh in one client you created the users and you created the authorization concept roles profile Etc and you cannot expect them to work in the other client okay I mean uh 800 client in trip Zer or something okay so but you may ask a question so hey I have a three clients okay you have a three three clients in a system for example in this system we only have 800 let's suppose you have one more client 900 client so you have done an excellent work I mean the clients roles every roles of users everything you created in this particular client and you want to take them to the other client 900 so do you have to redo the whole thing I mean 900 or how do you take this thing how do you take the configuration or the roles which you have created in the uh 800 client to the other client you can do a client copy to the new client that also we will explain over there but just to get a glimpse so I mean I'm trying to say these users and these concepts are client dependent only in that particular kind you will be able to log to that and if you want to take it to the other clients or copy you do a client copy or you have another possibility you know that is also important you can record these roles in a transports and you can import it to the other system or you can make this sometimes you can have an option to make them cross client customizing okay which means for all clients those roles or something those roles or profiles will be available for all the clients but users you have to create in each client it depends on your use case or you do a client copy with there is an option where you copy only use user Master data okay I mean users and then this part clear now with this slide what you understand front end application and database users are there and our focus is more on the front end users okay so this front end users are the client dependent okay that is the most important thing you have to do all the user request what comes to the system I mean you login with TCS user right so that will be processed by the dialog I mean work work processes based on your request if it is a background request it background process will take care update update will take care and then spool printing spool will take care like that I have created you a particular user okay TCS user one so how do you put uh the prodection methods how do you put a production whether uh um whether that particular person okay the TCS user will be able to do the action or not okay so let's take take this example you have user Master record so user Master record nothing but if you go to the su01 I will show you after this one I will explain you so if you go to the su01 and you give the username then you will find multiple tabs that is the user Master record I will show you or mhm let me let me explain you this user Master record first and then we will get back to the uh the previous slide users and authorizations then you will be you can easily correlate to the what I'm going to explain so let's do a display of this user okay so this is the user Master record so this is last Changed by the nav for this user my user on Sixth of so and so so here you see um documentation and then address log on data so and then snc defaults parameters what parameters so I will explain you in details what all these things roles profiles groups personalization and license data so this is the user Master record okay for this particular user you get the entire details of this particular user who is he what is going to do in your system okay so now minimizing option why is it appearing okay good so this is what I was explaining so you see user Master record on good so these are the sections I have shown you right in Su address log on data snc defaults parameters groups personalization license data profiles roles and so and so things now let's see the each and everyone's definition what are these things so address so address it's a you know the name itself will tell that what what does it contains address data so log on data so password and validity so I mentioned some of these notes also I mean if you want to get a clear understanding of more details of how this um log on data and the rules and regulations what passwords to be a used and how you can configuration that you will be in the log on data and validity of the user from how long to how long that details will be available and then snc this is important thing guys secure network communications so this is used to uh do an uh snc this is what I'm referring to this section okay so see snc is not active on this application servers unsecured is log on is permitted for specific users so if you enable this one so there's a parameter called snc SL enable you just check it in the system uh or you see it uh let's say that snc see this parameter snc enable so this parameter I'm talking so this parameter is zero which means this has not been set in the system that is what the su01 is telling okay so as a basis consultant this is important for you snc configurations you will get it day in and day out okay so snc is not active on this uh server because snc parameter is disabled and so this snc name okay so secure network communication if they Define you the snc uh particular there there will be one string they will give you okay when you are configuring the snc you will understand there is a string you have to generate so that string you have to place it over here and snc parameter has to be enabled and this snc configuration needs a restart why because you are changing the parameter s enable parameter from 0 to one you have to set so first you have to set that parameter and then you have to copy some crypto files so there is a procedure I have given in the note so where it explains what exactly you have to do if the is an SMC needs to be configured so most of the customers will configure this because it's a sand it's a test system so you don't have this configured but most of the customers will configure it and they will provide you the snc string what has to be configured over there so that only those particular people will be able to access through single signon so I think you might have heard single signon anybody using in your project single sign on SSO I mean without user and password you log to the system sap system have you tried what I'm telling you is uh for example U we are logging into this system using my PCS user one TCS user to right so you don't have to give the password again and again so the moment um you are uh you are with the company laptop so obviously your company will give you the laptop not to the client client laptop or from the client WTS or client Network they all has to be in the one network client Network there is a single sign on configur fation just to avoid this password giving password and or else there is a problem you know you can say your user to anybody right for example the user I gave you TCS user one you can give it to your friends or you can give it to somebody else or somebody can hack that user ID and password somebody can so for example I gave you only sap1 123 I mean if you said such a loose password somebody can try it and then log into the system okay so I mean I'm elaborating the use cases also in snc because it's very important for you I and remaining things are very straightforward explanations so anybody can log into the system right so with that user ID and password or you can share or I mean they can guess the password and login so that's a high risk for the customer so once you log into the system then you can do anything I mean of course there is an authorization Concepts and okay I can I'll tell you how that will be also restricted but yeah he can do certain things at least whatever he has the authorization so to avoid that what the companies will do or the clients or the customers will do in their systems they will enable this snc so which means single signon they configure so there is a certificate that certificate is installed in the your laptop I mean their laptop and that laptop is issued by the company so which means that sap system access is Possible only from that particular sap laptop or from a remote desktop for example you use for some customers you log into the remote desktop right windows so from there only the servers are accessible if you come out they will not be accessible so in that particular remote desktop or in that particular laptop they will configure they will configure that okay this is my certificate and check for this certificate in that particular laptop and in system also that certificate will be available and they both will do a handshake oh this guy using this string okay this guy matches to my this thing fine let me allow him fine so you don't have to give any user ID password just click on the system in sapgui it will take you to the system and then it will give you the authorization as per the roles and profiles whatever given so so now you understood snc so snc is a secure network communication so if you want to configure SSO or for example if you want to establish a communication bit from system a to system B okay instead of using the user ID and password you can also use this to communicate using the secure connection so some older versions this snc tab doesn't appear okay don't worry about it so for more information using the security network products you you know you can always check this particular note Tri 687 so up to date this will give you the latest security information on this one so defaults uh there is a section called defaults right so defaults is nothing but uh some of the default sections suppose um you as an user TCS user one if you give a print right uh print you always want to I mean you are printing an invoice so you may think that why would I need that print always go in a A4 A4 size right but so so if you are a customer use you are doing a petrol bunk and then you are giving a receipt right so that receipt has a standard format I mean you know some 2 cm by 2 cm or some standard format so those defaults you can Define here okay so when that particular user gives a print and then it always go and in the language also for example that's why this flexibility in sa system that's why they are very much successful guys so see it's such a simple for example in India I'm in an Andra I'm mean Bangalore so it's simple and the receipt you can just uh for this user you select Bangalore user okay you always give the print with that Bangalore user you set the defaults like okay this is the printer and this is the long language I mean Canada language or whatever is it but here it's a country wise so then simple so whenever from that user Bangalore if you print it it will print in Canada language only so the is it like that so that flexibility is there so that is the defaults okay so and then the parameters there is a section called parameters you see in the middle here so user specific fields for these SAP systems so there are certain things um I mean you can set that particular user you know maximum you need to have a minimum these many digits or um now this user should be able to do it I will I F you some use case when we doing the exercise we will do one thing so there you can for this particular user you can set those values okay you can give the extra kind of authentication kind of thing using this setting I mean a functionality it's not an authentication so you can give some more lenience for this particular guys by giving this parameters values so roles you know this roles so it is just that what authorization this particular person has it and then with which you can log and then profiles profiles is nothing but a combination of these roles I mean they will create it as a profile sap all sap all is the most powerful profile all sap system authorizations you have so that you also have it and then groups is like um yeah groups I will explain after this slide there is a slide where we talk about this groups thing okay and then personalization so personalization is nothing but um when you log to the system right I mean the moment you see uh so this particular thing so easy access menu see as a basis admin or a basis consultant you are comfortable with the transaction CS because it's your day-to-day life like st22 SM 66 sm54 so these transactions you will remember it I mean whether you like it or not because you do it in day in and day out so you remember it but this has to be monitored or the administ I mean work who will work on this system so at the end of the day the factories or the end users right the human resource people or the employees end users basically the petrol Bank whoever is giving giving the receipt or the in um account sections so these people are using this thing so for them if you ask them you know remember this transaction code they go crazy okay for them it just go and they click on this and then they do this so This is called the personalization or you can put it as a favorites so you know so if you do that personalization developers will do that personalization so for this accounting guys so for example for a material related thing manufacturing related personalization if you give it to the accounting guy he will go crazy so that's why developers according to the uh manufacturing or the industry they are working so they will do the personalization of the U user screens I mean giving more web web web related stuff over here or something okay so that kind of personalization only the developers can be able to do that okay so in some transactions see personal settings are required which have effect on the appearance so it is more of like an appearance if I have to put it in a word okay so that is the personalization like you know in our desktop right once you log into to the laptop you can change your screen right I mean log on screen and you can arrange the folders in the way you like it and some products will give you the thing um I mean how to change the color of those folders also okay so this is a kind of personalization so this is decided by the as I said the developer okay decides whether when the personalization functions are available or not so there is no special customizing switches or anything which you have to do so the developers will provide you facilitate you whether you can change the personalization or not for example logging into the sap GUI you have a lot of themes right I explained you so quads theme or the sap signature theme or webg theme is different like that so we know they will put you very limited options in sap but it will be suitable for the particular user so that personalization if it is available in the system you can always assign to that user so that he can see the appearance his appearance will appear for example if there are contractors where you have to Define their license related stuff because I mean you may think that in my organization how do I need to know but you know you just think of the organiz so as I said they are very very big Industries right you need to control so who are the licensed people and whether the user who has created his licensed or not that licensed data will be displayed in the license data so you see here so contractual user type so what kind of contractual user type and that thing you can Define over here this is the user Master record the name itself says for this user so EST user one this is the complete data so what this guy is who he is and what authorizations he has and what personalizations he has and how he licensed here this entire thing is called the user master record okay now let me go back to the slide fine so you have created a user okay let me put you have created a user so how do in what layers I mean how many levels you can check the authorization I mean uh restrict the authorization you see here so this is a user Master record for one user user Master record just now I explained nothing but the user ID and what all the data available in the system and then you have an user Master record thing so two levels of protection or the you can establish number one first of all whether the transaction has to be called or not okay so if you execute the uh let's say SM 66 so you know all of you this transaction code right so I called this SM 66 so it will show you the all the work processes in all the instances in the system okay so see of them are waiting fine so now one layer of production whether I can call the trans so first day somebody complained I'm not a I'm not able to execute these transactions it is giving an error for me right that is the first level so you can block the entire access to the transaction number two so second level is okay you can log to the you can access the transaction but you will not be able to do anything okay so changing or the updating or suppose if you want to delete this particular row so so that thing is not possible that is the second layer of protection so may a transaction called yes so if it if it is called authorization for actions and data during the transaction that is the second level of protection so here this diagram explains so let's do this thing okay let me put it in big screen so when okay as I said first of all allowing the transaction and the second option whether he can execute the particular uh I mean whether you can read the data or we can work anything on that is the another important thing okay so now once he logs in so first thing authorization checks so this has to be done so please try to understand guys so this this is easy topic but it is important to have a clear picture so a user comes to the system so two levels of this thing transaction permitted or number one it checks as I said if it is not permitted it will directly throw you an error I will tell you if it gives such an error how do you troubleshoot I mean what roles what authorizations you have to assign okay you don't have to assign sap all to everybody so there's a transaction called Su 53 immediately in that memory it is stored that I explain you later so you will know that which authorization is missing for the transaction then immediately what you can do is you can assign the transaction to you or we can create a user and we can try that so authorizations assigned and then to do the uh read the data or to change anything whether the right authorizations assigned or not that is important so these are the two checks authorization checks it will do so then um examples of objects which are requiring so these are the just authorization checks which we'll do when when user try to do so customer Master record or the user Master record so these are very very important things I mean you should you don't want to give this access to anybody okay so which needs more protection examples so for example if you have an sap all access you can do anything you mean you can delete my user I can delete your user and you can delete my user so that you don't you want to restrict only to the basis guys or the admins that authorization I mean modifying the user Master record which I mean the user IDs and then the customer Master record also customer Data customer data I mean what all factories I have and how many regions it has there so such data you don't want to give access to anybody and then lock entries also so lock entries if you delete then it will lead lead to an inconsistency and then the company code company data in the system so these are the very very important aspects I mean where you need lot of protection and uh maybe in the sap internal systems and SAP systems you may not find such an critical level of authentication but in customers this authorizations are very very important okay I mean you you cannot simply give an sap all access to anybody Okay so it is very very risky okay so before I move to this dialog uh sorry now we'll go to the user types okay so to add here how important is to give the right authorizations and the segregation of these users so you may think very silly or simple hey just a user you know just create it and give it but this is very very powerful I'll tell you one example let I was working in one of the client U BP British Petroleum it's a very big client okay so what happened one guy by mistake has assigned sap all to one user okay that user did not do anything just assigned okay he just assigned I mean he did not touch the data he did not do anything by mistake it happened I mean is the basis guy happened so but after uh day somebody got to know I mean I'll will tell you how they got to know they have a mechanisms how they get to know when there is an Sab all is allocated to any user then they will get to know okay I mean there will be a mechanism in the customer projects I mean immediately as soon as all is send it triggers a mail to your CEO of the company okay so it escalates to the managers managers managers managers it send the mail hey so and so user has been allocated sap all access okay so it's very very critical I'll tell you so the he has assigned one sap all access that's it the whole project or almost 50 to 60 people got fired because of that action you may think it's a simple simple sa all access and then immediately he removed it you may think it's such an easy way one minute task Oh heend by mistake and then he removed it that's it but and and he didn't do anything in the system so but why why such a serious action can anybody explain why it is a very very serious offense assigning a wrong wrong role or a powerful authorization to a particular user whether you do it or not right every sap system has a legal auditing contract okay every production system that's why I said there is a change management process you have to be very very careful when you are saying so why I am telling you these example is you are the basis guys you have a very powerful access so with the powerful access and you will have a powerful uh this thing powerful responsibility okay so don't ever ever you know by silly or by you know it's just a simple thing don't ever ever do nothing is silly in basis simple try to understand that I'll tell you why why that a serious offense so it's a production system number one in production system there is a socks auditing auditing means so every day or every alternative days there's a report runs okay what are the authorizations and that will go to the government not to you not to me so the company British Petroleum you see your TT TCS also Tata steel whoever is implementing the sap products right sap implementation Erp systems of the productive they have to go through the auditing and they have to represent to the legal courts okay stating that our systems are compliant and we are not doing anything illegal why satam satam computers went bankrupt okay why is satam computer CEO got arrested okay you heard right Financial fraud how do they do the financial fraud they log into the system and they change the data simple as said one zero you add one more zero so your revenue is one lakh per day and you just add one more you your Revenue increases to 10 lakh so in the share market your revenu is growing so then people invest then you are frauding the people right so that's why every production system has to go through an auditing I mean stocks auditing there are companies to do that auditing I'm tell you KPMG ey PWC there are companies who do the auditing in these SAP systems okay there are protocols they will follow and they have to present to the government that my sap system or how do you trust a banking HDFC and infosis you know they can anytime delete the data and tell that hey your data is not there you have not deposited how they compant so this is the thing so this is we are talking about the matter of money so fine you did not do anything but I see you legal you have put an sap all I don't know what you did but your system is non- compant which means something is happening in your system you have send sa because that user has a very powerful I mean he can do anything in the system you may tweak the data here and there but I can't do the whole checkup of your system but you have violated the government Norm or the government policy and the BP will get finalized for that some million euros okay because there is a it's a simple one minute task where the guy just assigned and then deleted that role but it was caught in the auditing by a third party I mean those third parties also recruited by in some countries government or in some countries before the government knows the company only recruits dedicated guys okay because if it goes to the government then it's like a reputational impact just imagine hey in BP somebody modified the data that's it their share market will collapse I mean these are the very very silly things so that I'm giving you the very important practical the importance of this authorization so by mistake or by any chance never ever give giving less authorization is always better than the you know getting delayed or whatever is than giving a more authorization so understand the important so then BP gets finalized by the so KPMG has caughted BP that hey there is a change you know you have assigned an sap all here is it data so every user data modification will be tracked don't ever think that it will not be tracked sap itself in the system itself there is a table okay there are tables where your activity will be tracked I mean what changes you have made what have you touched and everything so it is simple for these auditing teams just to check the table okay they'll see oh so and so TCS user has assigned sap all and removed the sap all fine no matter whatever it is this is not as per the terms and agreements of this company fine that that's it they will fine so for that assessment so if you change something then the fine will be more if you change nothing do then they will be a fine so some million euros it's not one lakh or two lakhs they'll charge Hefty amount because your system is not compliant as per the government rules and regulations or the financial rules and regulations right every stock market every company has the rules and regulations so everybody has to obey so the saan computers and they all did what same thing so they logged in with some user and then they change the data and they have shown the wrong data you know financi mean if I have to put it in a very nutshell so almost five to six years they have shown the wrong revenues wrong taxes so then at one particular point in time somebody has ident I mean they have seen this and then they caught it and they managed internally they saw auditing teams and all I mean without those things will be revealed outside okay so understand it so even though you are assigning just but it has very severe and serious implications uh in production systems so whenever you are doing something in the production system be very very very very cautious okay not only this so when you are importing that every activity what we are going to talk next 15 days right everything is critical okay never ever uh you know and stop don't do any multiple activities when you are working on a production system so these are the best some recommendations I give you with my experience I've seen lot of cases I'm telling you where I worked on sleepless nights for 10 days 15 days for fixing one issue okay in the customer location so they ask you to stay there okay and they will provide you food bed everything they will throw on our face in the meeting room okay in client location so we in 2014 I was there in London for the so I mean you know there was an issue that's it their legal team and they were after them and then we were on a meeting room and you will be supplied with everything and you address it that's it you fix it and then go home 14 days it took for us and everything over there only we were in the office 14 days we didn't even come out of the building so until we figured out who has caused it and what was done and what is done in the system and all the legal reports and everything is submitted then we will relieved it's like lockdown of the building so we almost 30 to 40 people were who are working on that project were relieved only after 14 days after doing so much so scrutiny so this is very important um understand these real life problems so you may starting your career in basis but don't get scared over a period of time I mean with these examples and stuff over a period of time you will uh get to know where you have to put a break and where you have to be controlled and and understand that you are the very powerful guy okay so basis guy is the most powerful in the entire sap landscape so you know that manager said or this security guy said that user said this user said never ever do anything so developers functional anybody they have their limitation they have that thing but as an admin it's you who can put a p stop over there you know stop it get the right approval I don't approve I don't import it without your so approval so following the process is also your most responsible task okay whenever somebody ask you to assign a user ID or password I mean some authentication extra authentication forget about it whether he is a friend or close friend or buddy or doesn't matter okay so there should not be any kind of affectionate or friendly thing you can help him troubleshoot you can help him do whatever you want but don't assign him the unauthorized authorization okay even though you think that he didn't do anything he just want to see it as a said example right you just assigned and you removed it but there was a serious implication because your system violated the uh Norms defined by the government or the financial organizations okay that is very very important guys so keep this in mind so that's why I'm stressing this authorization objects it's not only knowing how to do and how to thing you will be able to do it for sure but understand the criticality of these so now you understand the importance of these authorizations and then the we discussed about the users in three layer architecture I mean but we are only focusing on the uh front end or the the sap GUI related uh users okay so the next important question is so like I ask you what are the users you guys are already aware of it user types so we have around five types but four are the most frequently not most frequently four types we use little bit frequently but out of that two are very very frequently we use okay so yeah the screen and theory is fine but I will try to simplify it in a way at least you guys are comfortable with the terminologies and these users what they do and stuff but believe me only when you work and when you create something with that particular user then only you feel the real importance and you don't have to by heart whatever I'm explaining I mean don't have to remember but you will by inion or by thing you will uh remember that okay so the first and okay user types so let me go here this diagram first thing dialog and then we have system communication data reference and then service so mostly we use dialogue system system only these two mostly we don't in very rare cases we use I will give you examples you know where you use the service user and where you use the communication user where you use communication reference in my last last 10 years of experience I never used it believe me so I may not able to give you an example but remaining four definitely I will give you examples and they're perfect use cases where exactly you use them okay so now I'll ask you uh simple question I mean if you have worked on so with dialogue user the users which I provided you what type of users they are see if you have this user so TMS ADM doesn't exist in 800 client the reason is it's a client dependent user this exists only in the trip Z client okay clear so now let's see TCS u e R1 yeah so you see here here you can see the user type so what type of user it is a dialogue or a service or a system or communication user so dialog user dialogue user is mainly uh to do the day-to-day tasks okay so normal dialogue user you used by one person for example TCS user whatever I have provided you you only one person has to use but you can share the password but the thing is you you generally you should not share that okay during a dialog log on the system checks for the expired or the initial passwords okay so see first thing what it checks when you are loging with TCS user one so what it will do is oh what is my validity date so it will check this particular thing okay okay validity from and to you see here this one is this user is valid to 10th so what it will do is I will extend for all of you don't worry so display so log on data so it will check the first thing is validity so as soon as it doesn't meet the validity condition immediately it will throw an error hey the the user has expired okay so now the second one second check it will do is suppose the first time when I created this user you set an initial password like sap1 123 I gave you password right and then it ask you to prompt for changing the password so that it will ask the second check so see dialog user behavior is this just remember this so I mean you get again the this level I explaining this terminologies in a clean way that they will ask you in certification so what does dialog user do because these are all more like intuitive questions what does dialog user when you try to log in first thing things number one it checks for the expired or the uh initial password whether it is expiration or initial password and the user has the opportunity to change his or her own password that you did so multiple dialog log on are checked and logged okay for example um TCS user one okay if you share to somebody three or four people logs into the same user so as I said there are tables who will track that so there is a table USR 41 MLD so which will tag the how many times that user has logged in and what is it doing so I mean so if you go to the sc6 so for every most of the critical things guys believe me sap will track the logs I mean will will put a change uh so let's say the execute so you see here so B name is nothing but the username and mandate is these are the database terms ma NT wherever you see ma andt which is a client so in 800 client you see ACM Dem so peck two times and concurrently they logged in two times I mean immediately so this is the kind of thing they will have the data how much last date last time Peak date peak time first time first everything is tracked I'm telling you so especially when anything with Rel to the authorization and role changes and everything will be tracked don't say that nobody is monitoring it is just matter of time you know people like me just logs in and then open this report uh table that's it they will get to know the history of what exactly the consultant has done okay so that is why and specially for all the bases never ever underestimate that nobody is tracking for the basis so it might not be a case for developers so developers they may not track and they can't track also because those developments and stuff but for basis they know this guy is a very super user and they know that you have the access and this will be tracked by default sap will track it forget about the customer and others will track it in the system okay just for root cause analysis and then problem analysis so be careful that's just an example I'm showing US 41 ml table will track how many dialog users and how many times they logged in okay so then the next important user system user so system user is of type dialog free communication okay so for example background processing okay the work process which you you know suppose a job collecting the statistics of the database or the collecting the data of the certain um table okay those jobs are the background jobs they don't run in the uh what we call on a diog processing so for example if you put it on a dialogue so which means your screen keep on rotating that hourglass right rotating rotating rotating and you have to wait for hours to complete that thing so that job will run for one hour two I mean one day two days like that so then you would schedule it as an background job so such cases you always use the system user okay so system user can you log in with system user to the system system user can you log in as anybody with the TMS ADM will you be able to log in or with batore RFC or batore some user will you be able to log to the sap system you will not be able to log to the system with the background user so here you see not sap GUI capable okay so only two users forget about reference only two users you can log to the system one is dialog user which you all are having and the another user is a service user so to make your life very simple or the understanding very simple dialogue and service are the same both okay so this service user so but what is the difference why you need a service user okay so I mean when dialog and service is same why do you need both you can login with sapg why do you need service exactly so the reason is service users uh there are use cases for service for example a developer or app developer you know he always wants to access to the sap system okay but he's not communicating with the uh sapgui you know he has defined some kind of API you know application plugin so but he wants to log in every one hour and he wants to fetch some data and see it and then he will update his code and something like there but that guy uh you know he can't give the dialog user password again and again you got it so it's very frustrating for him and sometimes he forget his password also or his code he will change it sometimes so for that purpose number thing the most important thing is irrespective of how many times he hit the system so he his user should not get logged so but dialogue there is a restriction right so three to four times if you log into the system then the user get loged and then you have to contact the admin you know to reset the password so that I don't want to do that so service user is mainly used for the integration scenarios where a dialog kind of user is used so this service user will never expire okay number one and then it will never uh has the this one what we call uh uh password I mean password uh locking thing so it won't get locked you hit them as many times as possible so it won't get locked so this is the explanation here a user of service is a dialog user okay that is available to a larger and anonymous group of users so I mean for example there are 30 40 developers who wants to integrate or the create the applications talks to the one sa system and you giving 30 users to them imagine dialog users okay giving them 30 like TCS user 1 2 3 4 5 6 7 you know it's very painful thing okay so or I could have given all you 10 people right one user TCS simple TCS and then create it as a service user and given you okay why I didn't give you because I want to know who is doing what in the system you understand so that's why I given you dialog users with TCS one and two instead of a service user but know that there are thousands of people who are developing or integrating with one only one application and giving them thousand users is very irritating okay and in a admin imagine to reset their password those guys will lock their users and it's too much of admin work so such cases you create a service user of type and you give them all one user that's it hey guys okay what is your organization and you are working on your product this is thing okay fine use this user and in your applications whenever you are communicating to my system use this user and password so that is the difference between dialogue and service you got it right so only the user administrator can change the password of this service user okay so as I said the system does not check for the expired or the initial passwords during the log on okay this that is the beauty of service user so service user so it won't check whether it is expired or not no the service user user ID and password that's it and it won't ask you to change the password also because you are the admin and you set a password of strong password you know 13 digits 40 digits and give them that's it or else again they change the password and they won't share to anybody so that is the service user so service user is a diog user and you use it when you want to give it to a group of people one user okay or the project one user and then one password with no control for them only you as an sap basis guy has the control over this one okay service user will you be able to log into the sap GUI yes I said so yes you see the screen middle screen sap GUI capable dialogue and service users you can log to the sapgui but the difference is service user will not ask you to change the password and it will not check for the expiration okay and this password only Changed by the you developer okay so that's why left side you see password change dialogue yes it will ask you to change password change service user no any questions guys on dialog and service before I move to the next set of users they both are different category okay these two are one category so is it clear the difference between dialogue and service it is important so you are following me right I mean you are understanding so I'm trying to make things simpler but I'm not getting whether you are understanding or not so you getting clear difference between these two please do let me know system I've already EXP explain it's a dialog free communication I mean you don't want to log into it so within the system or from system A to B so most of the rfcs have you heard of the RFC connections sm59 okay so if you go to the sm59 so these users what they use here right they're all like technical Logan technical settings log on and security yeah IW user so let's go and check it out so they can use the other user so dialog free communication means so like s okay IW user let's check this one this doesn't exist I think this is a um system tri0 client related one so I will check you anyway it will tell you that if you go to the user it will tell you it's a system user so my question is sm59 let's check this one so this is a connection from this eh8 system to some AO system okay so in the log on and security GW admin so they're using this particular user okay so this is a uh system user okay you connect to that particular system using the uh this particular user so can anybody tell me what happens if I give a type of user dialog user here so I mean I want to explain you the dialog fre communication what exactly does that mean so you know putting the theory is fine for me you I can close and I can move ahead so see you know definition dialog free communication with a system for background processing okay this term you see it's a beautiful line but I can simply skip this and proceed but I want you to get a feel of what does it exactly mean dialog free communication okay practically suppose if you define this GW admin as a dialogue user in su01 right whenever our system eh8 tries to communicate to this Gateway system or this system okay what is going to happen so what happens when you first try to login with the dialog user it will ask you for user ID and password right so yesterday when you logged into the password what it will say it said please input me the password now also it it will tell you input me the password right so what happens is it will establish the connection but it will ask you to type in the password so you don't have this password status you got it that is a problem you got it what I'm trying to say and somebody can lock it and expiration is the another reason so dialog free communication mean dialog means it will prompt you to ask a password it should not ask for the password so it will take the password saved and then you proceed and always ensure that my connection was that is what I mean by the dialog free communication you understand that is why the system user comes into picture when you define the system user here then it will not ask for any user or password it will not check for the expiration simply it will go and it will always the connection will be working until unless someone go and change the password of this GW admin okay if you change the password you come to the RFC connection and you update the password simple so that is what I mean by the dialog frequ communication okay when you are establishing a communication with other systems so it should not ask for the you know changing passwords or expir passwords or this stuff okay that is the important so that is what I mean it can also be used rscs use various applications RFC they its main use case is the RFC connection remote function call this will I will explain in the RFC session exactly what are these connections and stuff but just know that such kind of connections when you are making from system a to system B connection that times you use this background which are dialog free communication and then TMS ADM also so TMS ADM also it's a dialog free communication so it will by default it configures when you inser the htms okay so it is not possible to use this type of user for a dialog Logan as I said not GOI possible in the screen okay so system user you will not be able to log to the sap uh system with sap Goa okay so and then we have the communication user so again communication user is also same like system user okay so I mean it is not possible to log to the system the usual setting for the validity for apply users this job okay so the only thing is uh the difference you can put a validity type here validity so system user it won't check for the um validity period okay ex so system user doesn't have an expiry date okay so I mean it will will not ask for the so that's what users of this type are accepted system user is accepted from the validity period or the password change passwords but suppose um you want to there is a system B you want to establish particular connection for only two days okay and you may forget it after that time so that guy May abuse it so if you want to avoid such a scenario what you do you define simply communication data and establish it two days it works and then it stops that's it so it's very simple now you let's make a quick uh recap I mean this this table uh you mean you know from this table we'll try to understand okay good so mainly we have the four types of user dialogue service so they both are same so service user the only thing is it won't ask you to change the password and it won't check it won't have an validity time okay it will be infinitely available simple and they both can be used to log to the system service user when do you use the service user when you have to give access to the group of people I mean when there is a project or the developers whom you want to give it to the this and then communication and system dialog free communication so you don't want to give it to the uh whenever you are connecting you don't want to punch in the password again and again for example background jobs RFC connections so dialog free communications you can use this two so the only difference between communication and this system is Communications thing you can set a validity and it will ask you to change the password also okay good so any further questions guys so most important ones are dialogue and system guys that's it apart from this service you anyway I think service you understood it so when to use it is it clear this concept okay so system user the is used for the RFC connections when you are connecting from system a to system B Okay so why you cannot use a dialogue user is whenever you are if you use a dialogue user in in instead of a system user so the behavior of the dialog user is simple right so it will ask you to punch in the password pinch in the I mean type the password okay and it will also three times if it the connection doesn't happen or it may fail I mean if the password has some change so system a to system B when you try to connect with dialog user it will prompt you to change okay punch in my password that is not I mean that is very irritating for you I mean you don't know when that system connection used right the background connection so that's why you put a system user there so that it won't ask you to change the password or if you won't ask you to put in the password first of all in the first place I mean update the password ask for the password prompt okay because it's just a communication and you never know that which which application uses that RFC connection and whenever it uses it will using the system user it will try to establish the connection okay so what are the examples where you use for system RFC connections and then background jobs I mean when you are running the jobs and then TMS ADM is one of the examples okay so system user do not expire okay it won't have an expiry date as long as that system user exists in the system it works okay so I mean it won't ask you to change the password also as an admin if you set the password then it will be there okay clear system the only only difference between communication and system is communication user has an expiry date that's it so for example and that use case is um you mean you are working on a project uh system a to system B connection only for two days so you don't want uh I mean the contract is up to two days only you set a validity date okay this you and um then you leave the user so it will act as a system user but with a validity date most importantly that is the uh most important communication users use case so yes so now we understand what is the um authorization concept and then we understand what are the types of users we have in the this thing and then we will talk about the security policy so this security policy you will understand more when you do an U use case Okay uh I mean when you do the uh assessment um the lab exercise which I have given you we will do it after for this uh session so security policy um is nothing but for example I'll give you an example so you are logging with the dialog user right in a nutshell you know I don't want to stress it too much so when you are logging into the user so I gave you a password sap1 123 but that password is very easy one okay six digits only so I want to restrict the password okay sometimes when you log to the Google also it will ask hey minimum you have to give eight characters and in that two digits has to be there and in that one alphabetical has to be there you understand so such kind of password restrictions can be created and then assigned to a role simple if I have to put so that is about the security policy okay but for the reference purpose I will read all these things but if you understand it that is the security policy simple every day you using any account you're login even Facebook Google anything it will there are certain security rules put for the password that is what it is the security policy okay so that you can do from the transaction code secp SE pole security policy so I'll just execute it so anyway I have designed one uh uh this one for you guys so security policy okay how to create and stuff and assign to your user so that you will try uh after this session okay so you got it security policy it's a simple one so there's nothing to it's just that you you should know how to do it that I explained in the labs okay how to do it from the uh system you do it then you will get a clear picture of it it is just restricting or setting up certain kind of guidelines for the passwords and then the users okay so then let's go to the next slide okay so the another important thing is the user groups okay so what are these user groups so Su okay now how many transactions I have executed so far from today morning only two two one is the su01 which is the user Master update I mean uh the user uh address data password setting expir date and so on so user Master record that's the technical term for the user and the second one I used is thec p okay security policy just before that is used to create the security policies I mean what password the user can have and how do you restrict that one and which you can apply to the many users okay that is the security policy then the third one the important thing is the user groups and I'm going to introduce you to the another uh uh transaction code here which is su10 okay so user groups in the sense for example you have an organization so I have a finance guys SD guys material management gu purchase procurement guys so many F guys and SD guys so many people are there so I mean each according to their group I mean according to their functionality the authorizations and the roles are different right suppose if you want to add a new role to the financial case so and going with one user you user by user it's going to be very tedious okay so what you do you create a group and you add 100 users in it okay simple 100 Financial guys are there so Mass maintenance is possible with the user groups okay so that's the only easiest way of understanding this thing but if you go to the su10 you'll understand Better or For example uh TCS user 123 all three 10 of you I I want to assign one role or extra authorization so I will give all the users in this user data so that's it change and then apply so Mass maintenance is possible for us so if you click on this authorization data so he see here user group so you can pick the user group here I mean whom all you want see here arba user demo user of demo systems let's see this one okay so so for all these things if you want to lock all of them we can all lock so if you their validity if you want to increase you can increase from so it's like Mass maintenance okay so Mass maintenance of these people is possible with the groups it's just simple you are grouping them together so that's about the groups okay in this idas there is only one guy so let's take some other user group okay authorization data and then User Group let's take let's take super okay so then execute anybody here yeah here many people so you see here so user group I mean they all belong to the super group I you can Define fi group or MD group mm group like that you can TCS group you can create all the TCS users so if you want to give them the you can select all of them from the group itself so then assign or do mass mass maintenance is possible it's also very important when you are working in big big projects where you want to change for 100 users 200 users know doing one by one it's going to be very tedious so just come here give their user group and then assign the role that's it so you see here so how do you assign the role um let's go back so again authorization data so User Group suppose you want to give authorization to the which of these guys which one we selected super where are you super yeah something so here suppose if you want to assign a new role you assign something okay language you want to change anything change it and then execute it then all the things will be applicable for them okay good so any questions guys on this user groups is it clear ah the second important thing where do you create these user groups I mean the super and all where do you create so there is another fourth transaction I'm going to introduce you Sr see you don't have to remember these things guys um so you can create a new group so if I want to create a TCS so here you do a TCS specify a user group okay so let me create TCS okay so I want to add the users see either clipboard also I can copy or I can take from all of you from here so so TCS user one TCS user 2 okay I'm adding all of you TCS user 3 so let's do these things yeah three users fine now save so later we can you can add it somebody you can this just for demonstration purp users for fine that's group is created so now what I'm going to do so or if or sugr if you want to display you can do that so if you want to see how many users are display user of TCS you know give you can see how many users are there now um if you want to you can change it now if you go here S10 okay before that let's see we will change something for all these users so TCS user one what we are going to change is yeah let me change the validity from 309 to 2021 see you see this uh this is with the 2021 right I will change it to the October okay for all the users so so you can so now let's go to the Su su1 all of them so I want to change to all those groups Whoever has belongs to the TCS groups so let me put TCS here and for all of them so I mean changing it to one by one it's very difficult for me so what I will do is I will validate validity so let's say September 1st to validity so just for the understanding purpose I will give the October 2nd okay so now let me execute okay so for this user group um somehow those users are not added PCS user group so I mean I I think I just have to go and add them one more time again the TS user and user two here you see so TCS user when is p added to this TCS group so it has been changed so if you want to see so su01 again TCS user one just display it okay I'll create it okay we will check it during the labs okay I'll create this one so somehow this system is not accepting but that that's how you do this okay I will I will yeah yeah I'll create it and I will show you somehow it's not saved it let's not waste time so that is the user group concept so because it's in a sandbox system sometimes they might be some restrictions okay I'll do that I I give you the demo don't worry so this fi Co SD mm and PP they are the different modules uh I mean each module you can create a group and you can do the mass Administration using this particular uh su10 Tre code I will show you later how to do that so let's start with this good so now what you understand so total four transactions I have includ introduced what is user Master record and then uh what level of authorization you can provide them I mean permit the production either you can log in or you cannot log to the system or execution level we can put and the third thing is I have explained about the users so what are the users um system user and dialog users communication and then the service user okay so now the important part is what is the roles okay how do you maintain user roles and assignments okay so here we're going to talk mainly on the I think you might have heard authorization object authorization profile authorization check and rooll okay and then uh user Master comparison so these are the these are the most important you know creating user is one part of the story so then assigning the right authorization is the another part and most of the cases you will get issues in the second part I mean the users do not have a right authorization so the other day somebody is telling that I don't have authorization right so what do you do if a customer I mean if a customer or the end user complaints that I don't have authorization so and so execute how do you troubleshoot it okay that we will see so how we are going to check this one what is authoriz object what is authorization profile and what is authorization check okay so so so to understand I mean what is this authorization concept and you need to understand what is the role and what are these profiles and um what are these basically okay so you look at this diagram we are going to explain one sore User Group authorization okay so now you try to understand it in a theoretical basis okay when I log into the system then you will understand in a uh easier or the better way first thing so you know we have again so groups fine keep it aside user groups for the mass maintenance you know you can gr Mass maintenance that is one part so the second thing is for those Mass maintenance for example I have a group of 100 bases guys okay so for all of them you cannot give sap all first of all sap all is completely restricted okay it's a training system you all got the sap all um you know nobody get get sap all in anywhere until unless as I told you how critical it is okay no one has an sapol access okay so just know that basis guys so what all authorizations basis guys should have or I'm creating a group for the basis guys so this is the object class okay I Define it as a basis Administration and then in that there is an authorization object okay so user Master maintenance or the user groups and then the activity what activity those guys can do okay and then User Group in the master record so what group they belong to kind of thing so there are any object class any if you open any authorization object we are going to open it soon I mean we'll open it as a part of it any authorization object will have three main Fields so hey this guy belongs to which object Clause is a basis guy functional guy or mm guy or whatever is it so it is in the terms of it's not User Group don't get confused it's we are talking about authorizations okay oh this guy belongs to the basis class okay what all things I have to what activities he can do that will be listed here okay like monitoring or using the tools or a database db2 db02 D so those activities will and then the authorization here you know what in this particular activity for example you are a basis guy uh db02 you know let's say the activity name is the monitor moning so monitoring what what activity is the monitoring monitoring means all the transactions at st03 st22 st01 whatever is the transaction you need only display access right so the authorization is nothing but what access in that particular activity this particular guy in this authorization object needs only display fine so for that monitoring activity you assign only display and then you have an activity where you have to update the or create users create so then you assign that okay su01 su1 so and so transactions I will create you have to create access and then change certain table or certain sc6 some entries you has to change so then you will provide for those transaction change activ so like that so these are the three concepts of the three critical things any authorization object okay which object class that guy belongs to okay it's a basis guy what all activities that basis guy do monitoring and then updating and then checking certain things okay so those are the activities in those activities what are the transaction codes this guy needs that is where they mention this authorization and provide this simple clear you know I simplified it in a way that it is very easy for you to understand that is the authorization object nothing so that is the authorization object or the concept of authorization what we are going to assign okay and then authorization check so how so again it's very very important interview question or certification also is very important what happens when a user logs into the sap system okay so sap system what all users can log into the sap system only dialog and service user fine dialog and service user logs into the system then screen so the first thing is Authority check so or the user context oh as I said okay it doesn't matter so it will log in dialog user it will first check the what so it's validity of the user okay oh this user is valid or not or is the password has been already changed fine if it already changed then type in the password it will come that's it that is already done as soon as you get into the system then authorization check oh this guy it's a basis guy okay what all things he needs so does he has authorization to execute this transaction okay he has an authorization to execute that st22 transaction then yes then process it or else if you don't um get this one I mean if you don't have an authorization if if your transaction is not defined over there for authorization object then it will say no and then it will give an error message that you you are not you are not authorized to log into the system simple this is the authorization check process okay so okay the moment you log in you got an not authorized to uh access this what do you do how do you know which all authorizations we not just execute the Su 53 transaction then you will get to know what all authorizations missing we will we will I will I will give you a demo okay if a user is not able to authorization check and want to know how what authorization this guy is missing that also it is very simple to identify okay so now let's so authorization check any questions okay then the another important term okay so in this one fine you we are defining what all activities a guy can do in the system right but can you find what all he cannot do for example he's a basis guy I want him to give the access except de access everything please provide it's a simple right coming in Reverse Direction instead of providing 100 uh transaction codes and 100 activities defining can you do like okay accept debug access can I uh give him everything can you do that anybody you understand except debug access give him everything so that kind of thing can we do that in a reverse way everything that is not exp complitely allowed is forbidden that's it this is can be described as a positive authorization concept you know there are authorization concept so this is an positive authorization concept which means if you have not defined for him that these are the activities and these are the authorization transaction codes he can access if he don't mention that's it he cannot access anything as well so even though if he has thousand activities that has to be explicitly defined in the that authorization object and that will be allocated to your role and that has to be assigned to that particular user you got it but anyway that is one time activity once you create the role or the authorization object that's it so they will be available so it's very important guys again it's again a true or false question during certification so same question which I asked you so in your customer client if a customer ask you to provide access apart from this particular accepting this particular transaction code is it possible no so so everything that is not mentioned or clearly defined in the Su pfcg so which will not be uh user okay so now we will do the um user roles and assigning roles to the users okay so I'm am going to introduce you the another transaction code which is PFC now we are going to the concept of role so the user uh assignment and the role creations and the user comparisons can be done from the pfcc okay so this is also a very important thing you can create a role and you can assign the authorization objects I mean extra authorizations and it is simple you assign that role to the multiple people basis guys or F guys or something I mean whoever is it belongs to them okay so you can assign a same role to the multiple people okay but a user can only access whatever the roles he has been assigned and what are the authorizations he has given to you okay the role can be assigned to the multiple users you know both the ways I mean you create a role and you get to the entire all the users that I will show you how to ass that okay that is possible so role is nothing but it's a group of authorization objects so you can Define it and then you can assign to your user particular user so see any roles which starts with this sap right they are the um standard roles I mean sap provides them by default but you always better not to use these roles so I mean by taking a copy of these roles you can create the your own roles so changes role Administration for web channels so let's no I'm trying for basis one okay fine click it any Ro so you see this so you just display this one ah it's very important guys so menu you can Define what are these guys can do display delete logs data browser call view transactions system log a web dump analysis so because it's a developer role so st22 analysis is important so you put all the things menu you can Define here or the some web related stuff also you can Define so this next thing is authorizations so guys this authorizations and then user it always has to be green color remember so this role even though you assign this role to some user he may be able to log to the system but he will not be able to do anything in the system okay that is a problem the reason you have not uh done the authorizations properly and your user Master comparison did not do so the importance of user Master comparison is why why sap has put complicated this you know simply you create it and you assign the authorization and you give it you give it to the person I mean simple it works no sap intentionally put here you have to generate an authorization object okay so here you see there is no profile which means it is useless no matter you whether usign so first of all you have to generate the profile for this fun and then you have to assign to the users and then do an user master comparision that is very very important guys so I mean most of the cases you get issues because of these two things so these two has to be um green color and you should know what all users it has assigned and you have to do user Master comparison first what we do is let's try to do the uh I'll give you a demo we will copy it to a different one so now I am going to do uh copy roll so I mean it won't allow you to use the saps uh it's not recommended you always take a copy so for example I'm doing a TCS uncore copy so copy all let me copy it okay I have copied now let me do this thing or let me go back and then let me change it okay I'm going to assign abap us abap roles to all of you how I going to do this role so I can give it to anybody whomever authorization L which means some problem what is the problem you come here there's no profile here and then users you have not assigned so now first you fix the authorization issue this one so you click on this so it has generated so which means you just generated the authorization profile for him okay so and then save good so now you come here so what I'm going to do is I'm going to assign this to the TCS user one TCS user 2 let's do this okay users have come and these are the validities for you guys oh this validity has changed guys so I mean it has changed to 19999 so that user it took time to reflect now I'm going to do the user Master comparision you must save the role first yes I want to save the role so profile comparison user attempted profile comparison update the profile first then ah see so which means your authorization is still has some problem so that is why it is not doing the so here at the bottom so which means the profile has not generated properly okay status current version not generated you see here so these are the important things you need to check guys so now what I'm going to do change authorization data so it will give you a disclaimer what you are doing all right let's test your knowledge here's a question for you which of the following is a benefit of sap basis in terms of system administration option a simplified user interface design option b centralized system monitoring and management option C improved Supply Chain management option D enhanced customer relationship take a moment to think and when you're ready choose the correct option remember each choice holds a key to unlock in the answer good luck type the correct answer in the comment section so sometimes based on the role it takes time so let's do that good so I I told you few things object class so this is the object cluse sap Ro for administration of the ab channels one diagram I told and these are the activities you know he can do cost application application objects activities what he can do basis Administration he can do basis development environment he can do and if you scroll down you will find what all things he can do as a part of this you know activity so I told you activity right what all activities he can do he can change display delete execute activate administer copy download everything so when there is a start then inan which clients everywhere you can do in name of the system any you know star star star which means so these are the activities he can do so as I said it's a positive um role concept which means whatever is assigned only he can do rest all he cannot do rest all activities is forbidden so these are all activities he can do as a part of this one and then administration of the internet communication again here so again add create everything is given star star star okay so like this you can add one more also if you want to add something else you add it and basis Administration let's go to the basis Administration so you can check the system authorizations let's see so sicf yes you have the sicf access and then system administration functions so these are all things okay so this is what I was explaining about the object class and the activities what all this is an authorization how this works now whatever you're going to do you have to generate guys so this is important guys generate there are open authorizations still okay generate profile is created okay then save so not generated again you click on this generation button generate okay Prof profile created authorization profile is current you see this earlier the status was different and then this authorization has become green you got it guys so you always have to generate the profile and it will tell you that this authorization profile is current okay sap want introduce use this to do this for every role I mean at least once whenever you make a change it's a double layer protection so even though somebody created a role and assigned to the users it will not work until that guy comes here and do the authorization I mean this one and they can restrict this who the whoever can change this also and only the authorized people can generate these profiles that also they can restrict it so that you know anybody can simply can go and change these things they will not do you know it should not be possible so sap wanted to introduce an extra of authorization and a team lead or somebody can generate these profiles then only this role works even though you create you have an access to create a role and you created but you will not be generate this authorization until unless you generate this profile current it will not work okay now the second thing user so who is this user so TCS user one TCS user 2 iend now you do the user comparison okay so complete the comparison let's do this now see now it has assigned this to the the comparison user Master completed so now this part also becomes green clear so then this role works for sure now you go to the su01 so TCS user display and then roles perfect this TCS has assigned and it is in green color which means you have given some ibap authorizations and you have assigned to this user and then this user will be able to work properly with this authorizations hey there ready to dive into the world of sap basis our course is here to guide you through it step by step in this course you'll learn all about sap basis it's like a tool shed for managing stuff from making sure we have enough resources to get them where they need to go our course covers everything you need to know from the basics to Advanced tips and tricks it's created by experts who really know their stuff your instructors are seasoned Pros who've been in the game for ages they're here to help you learn and answer any questions you have and guess what our students absolutely love the course folks just like you have found it incredibly helpful the best part it's budget friendly this amazing opportunity to learn won't break the bank ready to become sap basis Pro sign up on our page now for more info head over to Tech website stay tuned for more [Music] updates