Activating SAP* User in Visual Admin in SAP

Activating SAP* User in Visual Admin

Use

In emergency situations where you configured user

management incorrectly and can no longer log on to any

applications, or all administrator users are locked,

you can activate the emergency user SAP* to allow you

to log on to applications, in particular the

configuration tools, and change the configuration. The

SAP* user has full administrator authorizations. For

security reasons, the SAP* user does not have a

default password, so you must specify a password when

you activate the user.

Procedure
...
1. Activate the SAP* user:
a. Start the config tool for editing UME

properties as described in Editing UME Properties.
Editing UME Setting:
1. Start the Config Tool by executing

\j2

ee\configtool\configtool.bat.
2. In the tree, navigate to Global server

configuration services com.sap.security.core.ume.

service.
The list of UME properties appears.
¡ To change the value of a

property:
i. Select the property in the list.
ii. In Value at the bottom of the screen, enter

the new value that you want to assign to the property.
iii. Choose Set.
iv. Choose (Apply changes).
¡ To restore a property to its

default value:
...
i. Select the property in the list.
ii. Choose Restore to default.
iii. Choose (Apply changes).
¡ To restore all properties to their

default values:
...
i. Choose Restore all to default.
3. Restart the nodes in the cluster for

the changes to take effect.

b. Set the following properties:
Property Value Comment
ume.superadmin.activated true This activates

the SAP* user.
ume.superadmin.password Enter

any password of your choice. This defines the password

for the SAP* user.
c. Restart the Java

application server.
The SAP* user is now activated. While it is activated,

all other users are deactivated. You can only log on

with the SAP* user.

2. Fix your configuration as required, logging on

with the user ID SAP*and the password you specified.
For example, to log on to the Visual Administrator to

unlock users or create a new administrator user,

proceed as follows:
i. Start the Visual Administrator by executing

\j2ee\admin\go.bat.
ii. If you have not already done so, you have to

create a new connection entry in which you specify

SAP* as the user name. For more information, see

Creating a New Connection Entry.
iii. In the Connect to SAP J2EE Engine dialog,

select the connection entry you created and choose

Connect.
iv. Enter the password you specified in the

UMEproperties and choose Connect.
v. Do whatever is necessary to fix your

configuration. For example, unlock all administrator

users.
Similarly, you can log on to the UME administration

console using the SAP* user.
3. When you have fixed your configuration,

deactivate the SAP* user again.
a. Start the config tool for

editing UME properties as described in Editing UME

Properties.
b. Set the property ume.superadmin

.activated to false.
b. Restart the Java application server.