How to Activating SAP* User in Visual Admin in SAP

Use

In emergency situations where you configured user management incorrectly and can no longer log on to any applications, or all administrator users are locked, you can activate the emergency user SAP* to allow you to log on to applications, in particular the configuration tools, and change the configuration. The SAP* user has full administrator authorizations. For security reasons, the SAP* user does not have a default password, so you must specify a password when you activate the user.

Procedure
1. Activate the SAP* user:
a. Start the config tool for editing UME

properties as described in Editing UME Properties.
Editing UME Setting:
1. Start the Config Tool by executing

\j2ee\configtool\configtool.bat.
2. In the tree, navigate to Global server configuration services com.sap.security.core.ume.service.
The list of UME properties appears.
¡ To change the value of a property:
i. Select the property in the list.
ii. In Value at the bottom of the screen, enter

the new value that you want to assign to the property.
iii. Choose Set.
iv. Choose (Apply changes).

To restore a property to its default value:
i. Select the property in the list.
ii. Choose Restore to default.
iii. Choose (Apply changes).

To restore all properties to their default values:
i. Choose Restore all to default.
3. Restart the nodes in the cluster for the changes to take effect.

b. Set the following properties:
Property Value Comment
ume.superadmin.activated true This activates the SAP* user.

ume.superadmin.password
Enter any password of your choice. This defines the password for the SAP* user.

c. Restart the Java application server.
The SAP* user is now activated. While it is activated, all other users are deactivated. You can only log on
with the SAP* user.

2. Fix your configuration as required, logging on with the user ID SAP*and the password you specified.
For example, to log on to the Visual Administrator to unlock users or create a new administrator user,
proceed as follows:
i. Start the Visual Administrator by executing \j2ee\admin\go.bat.
ii. If you have not already done so, you have to create a new connection entry in which you specify SAP* as the user name.
For more information, see Creating a New Connection Entry.
iii. In the Connect to SAP J2EE Engine dialog, select the connection entry you created and choose Connect.
iv. Enter the password you specified in the UMEproperties and choose Connect.
v. Do whatever is necessary to fix your configuration. For example, unlock all administrator users.
Similarly, you can log on to the UME administration console using the SAP* user.

3. When you have fixed your configuration, deactivate the SAP* user again.
a. Start the config tool for editing UME properties as described in Editing UME Properties.
b. Set the property ume.superadmin activated to false.
b. Restart the Java application server.