## 3.1.1  Non-SAP Fiori Technology
User management for SAP S/4HANA uses the mechanisms provided with the Application Server ABAP, such as tools, user types, and password concept. For an overview of how these mechanisms apply for SAP S/4HANA, see the sections below. In addition, we provide a list of the standard users required for operating SAP S/4HANA.
## User Administration Tools
This table shows the tools available for user management and administration.
| Tool                                                                                 | Description                                                                                                                                                                                                                                                                                                                                      |
|--------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| User maintenance for ABAP-based systems (transaction SU01)                           | For more information about the authorization objects pro- vided by the subcomponents of SAP S/4HANA, see the ap- plication-specific sections.                                                                                                                                                                                                    |
| Role maintenance with the profile generator for ABAP-based systems (PFCG)            | For more information about the roles provided by the sub- components of SAP S/4HANA, see the application-specific sections. For general information, go to https:/ /help.sap.com/ s4hana_op_2021, enter User and Role Administration of Ap- plication Server ABAP into the search bar, press Enter , and open the search result with that title. |
| Central User Administration (CUA) for the maintenance of multiple ABAP-based systems | For central administrative tasks                                                                                                                                                                                                                                                                                                                 |
## User Types
It is often necessary to specify different security policies for different types of users. For example, your policy may specify that individual users who perform tasks interactively have to change their passwords on a regular basis, but not those users under which background processing jobs run. The user types that are required for SAP S/4HANA
- Individual users
- Dialog users - used for SAP GUI for Windows
- Internet users - used for Web Applications
- Technical users
- Service users are dialog users who are available for a large set of anonymous users
- Communication users are used for dialog-free communication between systems
- Background users are used for processing in the background
For more information about these user types, go to https:/ /help.sap.com/s4hana\_op\_2021, enter Application Server ABAP Security Guide into the search bar, press Enter , and open the search result with that title.
## Standard Users
This section describes the standard users necessary for operating SAP S/4HANA
##  Note
Ensure you change the passwords and IDs of users that were created automatically during the installation.
| System        | User ID                                                   | Type                             | Password   | Additional Informa- tion                                                                                                                              |
|---------------|-----------------------------------------------------------|----------------------------------|------------|-------------------------------------------------------------------------------------------------------------------------------------------------------|
| ABAP Platform | <sapsid>adm                                               | SAP system adminis- trator       | Mandatory  | Application Server ABAP Security Guide                                                                                                                |
| ABAP Platform | SAP Service <sapsid>                                      | SAP system adminis- trator       | Mandatory  | Application Server ABAP Security Guide                                                                                                                |
| ABAP Platform | TMSADM                                                    | SAP system adminis- trator       | Mandatory  | Application Server ABAP Security Guide                                                                                                                |
| ABAP Platform | SAP Standard ABAP Users (SAP*, DDIC, EARLYWATCH, SAPCPIC) | See ABAP Platform Security Guide | Optional   | ABAP Platform Secur- ity Guide Note that EARLY- WATCHand SAPCPIC may not be needed in your system land- scape. See note below this table for details. |
| SAP ECC       | SAP Users                                                 | Dialog users                     | Mandatory  | The number of users depends on the area of operation and the busi- ness data to be proc- essed                                                        |
##  Note
In most cases, the user EARLYWATCH is not used anymore. We recommend checking if this is the case in your landscape. If the user is not needed, it should be deleted to minimize the attack surface. For more information, see 1749142 .
The user SAPCPIC is sometimes used in legacy RFC scenarios or with EDI. We recommend checking if SAPCPIC is needed in your landscape. If the user is not needed, it should be deleted to minimize the attack surface.