In non-production systems, you can make changes to system profiles as often as you like. In production SAP systems, it is only rarely necessary to make changes to the system profiles. In both cases, you should carry out your maintenance tasks using the CCMS profile maintenance.
The profile maintenance tool has the following advantages:
- Convenience of use
- Extensive profile checks
- Testing of (several) individual profiles for consistency
- No inconvenient profile editing at operating system level
- Changes to profiles are logged
- Profile data is held in the SAP database (security, consistency)
- Provision of basic data for operation mode switching
We make changes in instance profile in extended mode.
A good number of parameters in the RSPARAM table define how security is enforced in the SAP system. These parameters have default values defined for them. If many of these default values are not changed, the integrity of the system can be compromised. The different parameters we changed are as follows:-
- Login/min_password_letters :-
This parameter sets the minimum number of letters the password must contain. The parameter is valid for both assigning new passwords and for changing and resetting password.
- Login/min_password_specials :-
This parameter sets the minimum of special characters the password must contain. This parameter is valid both for assigning new passwords and for changing and resetting passwords. All characters that are not digits , ASCII letters are regarded as special characters. This include characters- !, @, #, $, %, ^, &, *,{, }, _, -, +, =, <, >, ?, /, \, [, ], :, ;, .
- Login/min_passowrd_digits :-
This parameter sets minimum number of digits ( 0-9) that the password must contain. This parameter is valid both for assigning new passwords and for changing and resetting passwords.
- Login/min_password_lng :-
This parameter determines the minimum number of lower case letters that are to be contained in the password. It affects both assigning of new passwords and changing or resetting passwords. This parameter is not evaluated if the profile parameter login/password_downwards_compatibility is set to the value 5.
- Login/min_password_uppercase :-
This parameter defines the minimum number of uppercase letters that passwords are to contain. It affects both assigning of new passwords and changing or resetting passwords. This parameter is not evaluated if the profile parameter login/password_downwards_compatibility is set to the value 5.
- Login/min_password_lowercase :-
This parameter determines the minimum length of the login password. The password must have at least 3 characters. The administration can change the setting so that a longer password needs to be entered. This change affects all new passwords and whenever an existing password is changes or reset.
- Login/fails_to_user_lock :-
Every time a user enters an incorrect password, the counter is raised for that user’s master record. The logon attempts can be logged in the security audit Log. When the limit set by this parameter is surpassed, the user is locked. This is also in the SysLog. The incorrect logon counter is reset when the user logs on with the correct password. Logons that do not require a password do not change this counter. Active user locks have effect for all logons.
- Login/fails_to_session_end :-
This parameter defines the number of times a user may enter a wrong password before the login session is terminated. Recommended value is 3.
- Login/gui_auto_logout :-
This parameter defines the number of inactive seconds after which a user is automatically logged out of the system. Recommended value is 1800 sec.
- Rec/client :-
This parameter activates or deactivates automatic table logging. It is recommended to switch it on, however, resource utilization, table(s) to be logged and log volume should be critically analyzed

























