This blog will give you tips & tricks for the SAP license measurement.
Questions that will be answered are:
- How to deal with license classification for background users?
- How to deal with license classification for standard SAP users?
- How to deal with license classification for SAP support and firecall users?
- How to deal with multiple logon?
- What does Confusopoly mean?
According to OSS note 32326 – System measurement : Technical users all background users are free of charge. Classify them as type 91 Test users. This rule is valid for:
- Batch users to run background jobs
- SAP to SAP system connection users
- Interface batch users
Be careful with the interface users. If an external system posts data into SAP system with a single background user, but it is clear that in the source system multiple real users doing the actions, SAP might want to charge you for 'indirect use'.
System dialog users
SAP standard dialog users are excluded from system license measurement. See OSS note 1402837 – Info USMM/LAW: Excluded SAP users in the measurement for a full list.
SAP support users and fire-call users
For live support of an SAP system you typically will have 2 types of support users:
- Users for SAP themselves to logon to your system and provide support to you
- Fire-call users with elevated authorizations to solve time critical incidents
Both type of users have no direct business goal, but have only support usage. You can mark them as type 91 Test user, as long as you have a clear naming convention for these users and a general rule that they are locked unless they are needed.
User deletion as regular activity
The user measurement program (both USMM and USMM2) checks for deletion of users in the last three months. To avoid discussions on user deletion it is best practice to delete monthly, or bi-monthly, all persons which have left your company.
End validity date
Users who don’t have a current validity date are not counted in the user measurement program. You might want to schedule program RSUSR_LOCK_USERS in a regular batch job to end the validity of users that did not log on for long time automatically. See this blog for more details.
SAP does measure how many times a user has a double, triple, etc logon. The results are stored in table USR41_MLD. SAP might argue that the same user is used by multiple persons. You can use the contents of table USR41_MLD to prove if this was a mistake only. If the are too many multiple logons you might need to go back to the business to change their behavior.
You can also forbid the multiple logons at system level. SAP system parameter login/disable_multi_gui_login can be set in RZ11 to forbid multiple logons. For some users (like DDIC) you do want to keep multiple logons. These users must be set into system parameter login/multi_login_users=username1,username2,username3,etc.
If you think you know all about SAP licenses, SAP will change everything again. Dilbert has a nice word for it: confusopoly:
Sometime people on sales/buying SAP joke about the SAP abbreviation being Shut-up And Pay.