Wednesday, 21 May 2014

Client Administration

           Client Administration


When SAP is installed by default 3 clients (000,001,066) will be installed but in order to customize the system according to user requirements we need to create a new client.
Client will be copied from 000 client to enable customer based customizing

Table ooo- client table
USR02 – client dependent table because it consists of username, password and mandatory fields

Mandatory fields
B.Name
B.Code
066
Early watch
ABTRX (Encrypted password)
000
Sap*
-
000
DDIC
-
001
Sap*
-
001
DDIC
-

Two types of client data:

Client dependent date: User master record, customizing data (company code) and application data also called as customizing data

Client independent data:  Tables and reports also called as repository data.
In client copy and client transport tools the data will be replaced.  It is not designed to combine the data of different clients

How to create the new client -

Create a client:
1.  Go to SCC4
2.  New entries
3.  Client number
4.  Client name
5.  Location
6.  Currency
7.  Client role (eg: production, test, customizing, demo, training /education, Sap reference)
8.  Logical system Name:  it is identified by (<SID>CLNT <client number)
Eg:  DEV CLNT200

It is used to identify the client across the system/landscape.  Logical system can be created in SALE (system application linking enabling).  Transfer the data between loosely coupled systems

9.  Clients settings: ARC: Automatic recording changes
When we set a client with ARC, a change request will be generated whenever a change/create occurs in the client (customizing client is to be assigned to ARC)
10.  Changes to client dependent objects only
Changes to client independent objects allowed
11. Protection level (0 for no limit, 1 for no overwriting 2 no overwrite and no external availability). A client with protection 1 and 2 will not functions as target client
12. CATT (computer aided testing tool) is allowed. CATTs are used to generate test data which are used for demonstration purposes later
13.  Protection against copy/upgrade

Client Copies Types

There are three ways we can go for client copy
  • Local client copy(SCCL)
  • Remote client copy(SCC9)
  • Client transport:  Client export and import(SCC8 and SCC7)

Prerequisites of client copy:

Ø  Find the size of the client (RSTABLE SIZE AND RSSPACE CHECK) by using SA38
Ø  Back ground process is available
Ø  No user are logged into the source client
Ø  Test run /simulation
Ø  Lock all the users in the source client.
Ø   Client copy must be started from the target system, so login into the target system using sap* and pass
Ø   Ensure that transport management system is configured and working fine.
Ø  Minimum two background jobs should be available, otherwise pause all background jobs by enter TC-SE38 and run RSBTCTRNS1 report. To reschedule all job back into normal run RSBTCTRNS2 report.
Ø   RDDIMPDP job should be run in background, otherwise run report RDDNEWPP.
Ø   TEMP and TRANS directories should be have three times of client size free space.

Procedure of client copy-

Local client copy:  when we copy the client in the same system we can use SCCL
  • Logon to the target client with sap* and pass
  • Go to SCCL, specify the profile (SAP_ALL, SAP_NEW)
  • Select the client from where the data has to be copied
  • Schedule the back ground
  • GO to SCC3 to monitor the client copy logs
  • Go to SM37 to find the background status

Remote client copy: 

  • Create a client in SCC4
  • Set up the client
  • Login to the target client
  • Establish a connection between a target client and source client in SM59
  • Go to SCC9
  • Select the profile
  • Select the source client
  • Execute in the background

Client Export and Import:

. Run SCC8 
2. Select Profile for desired copy type (Usually All SAP_ALL or user master only SAP_USER. You will need direction from the requester as to the correct selection here. Use Profile -> Display Profile to display profile details.) 
3. Select target System (or group)  4. De- Select “Test Run” (If selected)  5. Run Export  - Up to 3 requests are created, depending on the data selected and available:  1. “SIDKO00353" for transporting client-independent data, if you have selected this  2. “SIDKT00353" for transporting client-specific data  3. “SIDKX00353" for transporting client-specific texts, provided texts are available in this client  6.Monitor TP logs for errors and export files for growth
2. Login to client (sap* – pass) 
3. Manually add “O” transport then “X” then “T” to TMS buffer 
4. Highlight #1 and use “Request -> Import” to launch import tool 
5. Monitor “I” file in OS “/usr/sap/trans/tmp” dir for progress info 
6. After Import is complete perform “post processing steps” from client tool (SCC7)


  
Some Interview Questions client administration

1.what is client

2.what are the default client in sap

3.How many type of client data

4.How to lock the client

5.what are the prerequisites  while doing client copy

6.How many types of client copy ,what are the T-codes and explain it

7.What is the most preferable client copy

8.If client copy is not allowed ,how to resolve it

9.what are different types of client roles

10.what are different types of profiles available for client copy

11. What are the Authorizations need to perform client copies

12.How to create a new client ? In which table all client will be stored

13.where we find client copy logs

14. How can hide client from the user

15.How can copy all user from client to another

16.which type of files created in client Export

17.How to know the client size

18.What is client specific data

19.what is cross client customization

20.How to delete the client

21.client is not allow to client copy where do check and how trouble shoot

Monday, 19 May 2014

Sap Basis Interview Questions with answers

1. What are Homogenous system copy and Heterogeneous system copy and

Homogenous
homogeneous system copy is performed when the target SAP system is supposed to be installed on the same operating system and                                          the same database system as the source SAP system. The contents of the database is copied from the source system. 

Hererogeneous
Heterogeneous system copy is performed when the target SAP system differs in either operating system or  database system ,or both 

2.How you will do client copy?
 Client copy are three type
 Local client copy (SCCl)
 Remote client copy(SCC9)
 Client Export and Import(SCC8and SCC9)

3. If SAP* is not available then how u will do?

    Using T-code RZ10 change  the parameter Login/no_automatic_user_sapstar=0
     RZ10 is static parameter so we have to restart the instance ,after restartin changes
Will be applicable

4. After client copy is table space and database sizes will be increased or not?
    
Yes.   DB Size & Tablespace size will definitely increase after
client copy. 


5. How to do client copy fast?

    Increasing the background work process
(or)
Selecting Parallel Processing and setting all required configuration to make client Copy Fast.

6. What are various profiles available for client copy?

    SAP_ALL  -all client-specific data w/o change documents
    SAP_APPL-customizing and application data w/o change docs
    SAP_APPX -sap_all w/o authorization profiles and roles
    SAP_CUSV - customizing and user,variants
    SAP_CUSX - customizing w/o authorization profiles and roles
    SAP_CUST  - customizing
    SAP_USER  -user master records and authorization profiles
    SAP_UCSV -customizing ,user master records and user variants
    SAP_PROF  -only Authorization profiles and roles
    SAP_UCUS -customizing and user master records
    SAP_UONL -user without authorization profiles and roles

7. How to do transport’s between Production and Development?
          
           Using T-code STMS_IMPORT ,

8. How to apply OCS Patches?
    
 
 Using T-code SPAM

9. How to do client copy?

Client copy are three type

1.Local client copy (SCCl)
2.Remote client copy(SCC9)
3.Client Export and Import(SCC8and SCC9)

10. How to do transports from OS level?

Logon with <SID>adm go to command prompt.
Go to path /usr/sap/trans/bin/
Assume Your DEV to QAS
First add request to buffer.
tp addtobuffer DEVKXXXXX QAS pf=/usr/sap/trans/bin/tp_domain_<SID>.PFL
Now import Phase
tp import DEVKXXXXX QAS client=XXX pf=/usr/sap/trans/bin/tp_domain_<SID>.pfl
Check for the return codes.

11. Where the transport data files will be placed?
       Transport data files ara placed in
      
Path-/usr/sap/trans/datafiles-datafiles start with R(RO,RT,RX)
        /usr/sap/trans/cofiles   -cofiles start with   K(KO,KT,KX)
  
12. How to make security authorization reports?
    
    Using T-code SUIM

13. In which table failed user login attempts will be there?
     
RSUSR006 to check unsuccessful login and locked user

SE16 to browse tables
Tables:
USR02 we can monitor why the user is locked
If the value is 0 the user is not locked
If the value is 64 the user is locked by admin
If the value is 124 the user is locked because of wrong password

14. How to see the t able entry values?

     Using T-code SE16, All tables are stored in DD02L table
,
15. How you will give new authorizations?
    
      Using T-code pfcg,

16. Have you participated in Kernel upgrading and OCS Patches?

      YES

17. Have you done any up gradations?
    
  
      NO

18. How to configure TMS?
      
      -Loging to 000 client
      -To call the T-code STMS
      -It will display the one pop up box to configer the domain controller
      -Specify the description
      -Transport domain name :Domain_<SID>
      -Save the configuration
Creating virtual system –
 
-        Execute STMS(Domain controller)--- menu overview – system – sap system – create – virtual system

Creating transport routers
   
-        Click on transport routes – from over view menu configuration –standard configuration –three system in group

19. What is transport domain?

       Domain contains more than one transport groups and having only one domain controller

20. What is Consolidation route and delivery routes? How you will identify them?
      
   Consolidation route-  This is the route exits in between Integration system and Consolidation system

   Delivery router-- This is the route exits in between Consolidation system and Recipient system

             transport domain :it is the place the transport layer and routes can be configured to access this transaction use stms


21. Transport error codes and their description?

 Return code (4) indicates imported ended with warning.
Ex:
1.     Generation of programs and screens
2.     Columns missing and Rows missing.

Return code (8) indicates not imported ended with error
Ex:
1.     Syntax error.
2.     Program generation error.
3.     Dictionary activation error.
4.     Method execution error. 
Return code (12) indicates import is cancelled.
Ex:
1.     Import is cancelled due to object missing.
2.     Objects are not active.
3.     Program terminated due to job “RDDEXECL” is not working.


Return code (16) indicates import is cancelled.
Ex:
1.     Import cancelled due to system down while importing.
2.     Import cancelled due to user expires while
importing
3.     Import cancelled due to insufficient roles.

22. The transaction should not be displayed in User Easy access menu. How to do user auditing in sap? What will u audit?

         - Using T-code SM19 and SM20 check the security audit logs
                      
Using ST03 with below procedure:

1.      Start the Workload Monitor by calling transaction ST03.

       2.      Choose the instance and period to be analyzed by double-clicking.

       3.      Choose  Analysis Views -> Transaction Profile ->  Details -> <transaction code>.

       4.      The system displays the usual output area, in which the requested workload is displayed.

You can use even STAD or STAT also
                   
23. How to find users used transaction codes which are not authorized for?

         Go to SUIM  à Transactions à  executed for users
          What is the transaction code to list users who have access to a specific transactions such SM69 and authorization objects.

24. How to schedule online and offline backup which takes every day, every week. How to monitor it

            Online backup – When no system down time it is acceptable ,it is also called as Hard backup. A hard backup can be done even user access.
      Offline backup – This backup is perform when data base is stopped . This is the safest way to take the backup. It is also called as cold backup

Backup schedule in DB13
Backup monitored in DB12

Online backup take every day
Offline backup take every week

25. How will u send mail after completion of backup?.

 You can configure your own Monitoring tree in RZ20 with the following MTE names CCMS_ORA_backup_db_run_pfcl and  CCMS_ORA_backup_db_run_smcl which will give the last backup run and the last successful backup completed or not.
After creating the MTE assign the Auto reaction method to these MTE. This auto reaction method should contain the email id to which the alert should be sent.

29. How to lock or unlock a transaction code using sm01?
  
Using T-code SM01.Look for the transaction you want and then check the “Locke” box.Because some transaction are  “dangerous “ a user without the proper training may accidently corrupt or destroy the system.
                                         
(Or)

       SM01 is a very useful transaction. Not only can you lock transactions from being used at all in the system, but as a general SAP use it can also be used to look up transaction codes, whether for functional information or simply because you forgot which code you need! 1. In SM01, Type the T.Code which u want to lock (for example here, ST03)  and press Enter do not select the Tickbox, Directly click on the tcode and press Lock/Unlock button.

30. How to setup RFC connection in ecc6 tells me steps involved?

-       Using T-code SM59 create RFC connection
-       Go to SM59
-       Click the connection type [R/3 connection, R/2 connection,Tcp/IP]
-       Click on create
Name of RFC connection
Type of RFC connection
Description of RFc connection
-       Go to Technical setting Tab
Specify the Gateway Host/IP adderss
-       Go to Logon security
Client No:<source> ,user id ,pwd,Language
-       Save
-                                                             Test the connection(This is used to test whether we are able to connect to the destination and also it will send some sample date and check at what speed it is sent )

34. What is the database backup strategy in your company?
       
      Online backup every day
      Offline backup every two days
      We are using veritas net backup

35. What is upgrade process? And how u will do that?

       It is used to update the database tables permanently by reading from the temp tables
-       User submit the request
-       Dialogue handle the request
-       Obtain lock from Enqueue so the data consistency is achieced and the records are only for display for other users
-       Updates the request in Temp tables (VBHDR, VBDATA,VBMOD, VBERROR)
-       Get the transaction ID from NRIV (  Number range interval Table)
-       Update get initiated to the update the VB* content permanently into the database
-       Update inherits the locks
-       Update the database in transaction ID
-       Update release the lock from the record in SM12
-       Update monitored using transaction SM13
                              (Or)
-      An upgrade updates an existing SAP system to a new release. The upgrade contains program code and data changes or introduces new areas of functionality.

36. How u will give new authorizations?

  Using T-code PFCG
  
 SU21-creating new authorizations
 SU24-Authorizatio Objects

37. How to adjust user master records? If user master record doesn’t adjust what will you do?  
     
     We can set the option in PFCG to compare automatically .

     Choose the role and display/change button.
 
      Goto Utilities -->Settings
 

     Just select Automatic user adjustment when saving role
   

User Master Reconciliation:  In order to make the roles created or modified to the user we have perform the following

Ø Schedule the PFCG_Time_dependency program periodically to update/reconcile the user master records from time to time  by       defining a background job
Ø Run PFUD (profile update) to reconcile/update the user master record
Ø Use user compare after assigning the role to the user

38. How to check Kernel, tp versions?

        Method 1:
-                      Logon to the Sap instance any client
-                      Go to transaction code SM51
-                      On the SAP servers screen click on the server for which you need to know the information and click on the release notes button

        Method 2:
-                      Logon to the Sap instance any client
-                      Go to menu system –status
-                      Click on the other kernel info at the bottom, look down until you find the kernel patch number

        Method 3:
-                      Logon to the Sap instance
-                      Go to run type cmd and go to command prompt
-                      Now go to Usr/SAP/<SID>/sys/exe/run and type disp+work and press enter
-                      Scroll the listing till you find a line beginning patch number. To the right is the patch number for the SAP instance hosted on this server

Go to command prompt –  just Enter  “tp”  it will display the tp version

39. what is user master record

    The concept of user master records User master records defines the user accounts for enabling access to the SAP system. The user master record is mainly used for user administrative and Authorization management (Role Administration). Normally, the user master record contains the user id as well as a wealth of other information which can be used by SAP system administratorsin managing users effectively.
For example, the user master record contains information which validates a user log on session. User master record  stores important information like users access rights to SAP, user's passwords, the
 authorization profiles and so on. User master records can be accessed using the Transaction T Code SU01. In t-code SU01, users can be displayed by user id or in case one does not know the user id, users can be displayed using all possible entries.
You need authorizations to create or maintain user master records:

·      Authorization to create and/or maintain user master records and to assign a user group (Auth.object S_USER_GRP).
·      Authorization for the authorization profiles you want to assign to users (Auth.objectS_USER_PRO).
·      Authorization to create and maintain authorizations (object S_USER_AUTH).
·      Authorization to protect roles. You can use this authorization object to determine which roles may be processed and which activities (Create, Display, Change and so on) are available for the role(s) (object S_USER_AGR).
·      Authorization for transactions that you may assign to the role and for which you can assign authorization at the start of the transaction in the Profile Generator (objectS_USER_TCD).
·      Authorization to restrict the values which a system administrator can insert or change in a role in the Profile generator (S_USER_VAL)

41. What are common background jobs that will run in your system?
     
sap_collector_for_job statistics : collects statistical data to analyze the average runtime of periodically scheduled jobs                                                                                          
sap_reorg_jobs                           :  deletes all logs of successfully executed jobs
Sap_reorg_jobstatistic               :  reorganizes the runtime statistics of the background jobs
sap_reorg_batch input               :  deletes process batch input session and their logs as well as all logs for which session no longer exist
sap_reorg_spool                         :    deletes outdated spool objects
sap_reorg_abapdumps               :    deletes entries from runtime errors
sap_reorg_priparams                  :    reorganizes the print parameters
sap_ccms_moni_batch_db                 :    system monitoring etc

43. How to schedule background jobs at OS level?

     log into you Operating System with the SIDadm user id (at the Operating System level) and go to directory /usr/sap/SID/SYS/exe/run

- Run the SAPEVT executable as follows:

sapevt YOUR_EVENT -t pf=/usr/sap/SID/SYS/profile/DEV_DVEBMGS00_server001 nr=01

This will raise the event, and cause the job scheduled within SAP to execute
                           (OR)
Actually we cannot completely schedule background at OSLevel but we can trigger a background job which has alreadyscheduled by using sapevt tool syntax as follows.
sapevt <event name> nr=<instance name> name=<host name>

44. How to add authorizations, how you will maintain profiles?

1.Use T-code PFCG.
2.Enter Authorisation Group.
3.Click on change mode.
4.Open tab 'User
5.Add user SAMPLE1
6.Save
7.Compare the same role either in Display/Change mode.


46. Transport request types and its syntax?

        1.Work bench request -
        2.Cutomisation requet -
        3.transport of copies   - 
        4.Relocation                -

47. Where will u find transport error logs?
   
      you can see the logs in /usr/sap/trans/logs( Alog , Ulog, Slog)   in Os level .For change request log you can view at sap level with
transaction SE01
                                   (Or)
SE10 -- > transport tab at right -- > select transport from list -- > click on log symbol from tool bar

50. How to define instances and operation modes?

Operation modes are used to switching between dialog to background, background to dialog without restarting the server.
  The T codes used are RZ04, SM63, and SM21

RZ04 to define a OP Mode
SM63 to create a time schedule
Time schedule is of two times 1) Normal (24 hours) and 2) Exceptional.
SM21 to monitor system log

          Steps to Setup OP mode:
  • Define the Operation mode.
  • Create Instance definitions.
  • Assign a instance definition to an operative mode.
  • Define the distribution of work process for OP Modes.  This distribution is a mix of dialog and batch work process
  • Assign the OP Modes
  • Define or set the schedule when the modes will switch and to what mode it will switch to

              We cannot delete a OP mode directly, first we have to delete the time schedule and then Delete OP Mode