Security

What is a security-relevant property of the passwords for the RFC communication user used by SLT?

In SAP NetWeaver AS ABAP (and therefore SLT), how are authorizations actually delivered to a user?

A security team asks which security guide governs user management and authentication for SLT itself. What do you point them to?

When replicating to SAP HANA, what are the two mutually exclusive options for how the target database connection is handled?

In the SLT-managed HANA connection option, what must the HANA target user be able to do that is unnecessary in the not-managed option?

Before setting up a not-managed HANA secondary database connection, what must already be true about the replication schema?

What naming convention does SAP recommend when creating replication users for HANA replication schemas, and why does it matter operationally?

What user type is required to access the ABAP source system over RFC for SLT, and what can it deliberately NOT do?

S_DHCDCCDS and S_DHCDCTAB are near-twins in the CDC family. What object does each check, and which field distinguishes them?

For cluster tables in SLT's initial-load parallelization, does the Number of Records value refer to the logical or the physical table?

By default, how many calculation jobs process the same table concurrently in SLT, and where is that set?

When raising concurrent calculation jobs for one table, what upper bound does SAP advise and why?

Why is the DDIC user specifically contraindicated for driving SLT replications?

Why does the HANA initial user need ROLE ADMIN, and can it be removed later?

When exposing an ABAP system to SAP Data Intelligence Cloud via the cloud connector, the function whitelist differs by system. How?

In the Data Intelligence Cloud scenario, which connection types connect to SLT versus to Azure storage?

What does the Read from Single Client option do when creating an SLT configuration for an SAP source?

On the source side, how does SLT's data acquisition record which kind of change occurred, and where?

For an SLT-to-flat-file scenario via SAP Data Services, which two roles are needed and on which systems?

In SLT, what binds the SLT system and SAP Data Services together for a flat-file load, and what else must be configured?

In the S_DHCDCCDS field DHCDCCDSRS, when do you use C1 versus NO?

What does authorization object S_DHCDCSTP check, distinct from S_DHCDCCDS and S_DHCDCTAB?

Which privileges must the HANA replication user hold on the target schema, and which extra read grant is easy to forget?

A user has role SAP_IUUC_REPL_ADMIN. Can they view the actual business data being replicated to the target?

Which single authorization ingredient turns on the ability to view replicated data through the SLT replication logging function?

What does authorization object S_DMC_S_R govern, and how many fields does it expose?

You must restrict SLT access to only certain configurations. Which authorization object does that, and via what mechanism?

What is the easily-missed step when you want S_DMIS_SLT to actually protect configurations for your users?

Which three fields make up authorization object S_DMIS_SLT?

Authorization object S_DHCDCACT is checked for the change data capture engine. Which source systems is it relevant for?

What are the five activity values of the DHCDCACTVT field in authorization object S_DHCDCACT?

When is authorization object S_DHBASACT (ABAP Agent) checked?

What do the DHBASACTVT activity values of S_DHBASACT let a user do?

Which four fields make up authorization object S_DHCDCCDS?

Authorization object S_DMISIUCA governs SLT activities. How many fields does it have and what is it?

What do the four IUUCACTVT values of S_DMISIUCA let a user do?

Role SAP_IUUC_REPL_ADMIN gives full control of SLT configurations. Which three authorization objects does it bundle?

Which six activities are assigned to the S_DMIS object inside role SAP_IUUC_REPL_ADMIN?

How does SAP_IUUC_REPL_DISPLAY differ from SAP_IUUC_REPL_ADMIN at the authorization-object level?

You are upgrading SLT to SP 15 from a release older than SP 13. What role-related check is essential?

The ABAP source-system role SAP_IUUC_REPL_REMOTE carries one telltale field value. What is it and where?

For an SAP S/4HANA on-premise 2020+ source, why can't you just generate SAP_IUUC_REPL_REMOTE as-is?

When customizing the 2020+ template role's CDC objects, what value do all three take for the subscriber-type field, and what goes in the name fields?

For replicating from a remote non-SAP source, what privileges must the database user hold beyond just reading the table?

To pull data from a non-ABAP source, which role must be added in the SLT system itself, alongside what activities on S_DMC_S_R?

To write into an ABAP-based SAP target over RFC, which role must the connecting user hold?

In the SLT-managed HANA option, what name does the automatically created target schema take?

Why must an initial user already exist in the HANA system before you create a managed SLT configuration?

Which HANA system privilege lets the initial user create the schema, and what is notable about its lifecycle?

When does the HANA initial user additionally need USER ADMIN, and what does that combination enable?

What is the specific purpose of granting CATALOG READ to the HANA initial user?

Which HANA table holds the configuration-relevant information about source systems connected via SLT?

What schema is automatically generated when the first SLT configuration is created for a HANA database?

A second HANA database user needs access to an existing SLT configuration. Which object and privileges do you grant on the SQL Privileges tab?

How is the HANA replication user created and how does SLT store its credentials?

What does the HANA replication role <REPLICATION_SCHEMA>_DATA_PROV grant, distinct from the other replication roles?

The HANA role <REPLICATION_SCHEMA>_POWER_USER exists but carries a strong warning. What is it and when should it be used?

Which HANA replication role provides the tighter, procedure-based access control for replicated tables?

What does <REPLICATION_SCHEMA>_SELECT_USER grant, and what critical thing can its holders NOT do?

Your users need to grant select access on replicated tables to others, but the standard select role can't. What's the fix and from which release is it automatic?

Which two stored-procedure parameters, beyond the privilege flags, must you supply to RS_GRANT_ACCESS / RS_REVOKE_ACCESS?

How do you tell RS_GRANT_ACCESS to grant SELECT but leave INSERT/UPDATE/DELETE untouched?

Where are grant/revoke actions on replicated HANA tables logged, and how do you tell which procedure did it?

In table RS_MESSAGES, which columns carry the affected table, the timestamp, and the privilege/error details?

In the not-managed HANA option, whose job is it to authorize end users to read replicated table content?

By default SLT has unrestricted access to every table in the ABAP source. Which table lets you clamp that down?

Table DMC_C_WL_TABL_OP is delivered empty. What is the counter-intuitive effect of that, and of adding one row?

How does a freeze trigger behave differently from a standard SLT database trigger on a source table?

In DMC_C_WL_TABL_OP, why can't you grant LOAD_DATA or REPLICATE_DATA to a table without also granting READ_METADATA?

You enable READ_METADATA for a source table that contains include structures. What extra step is mandatory?

On SAP S/4HANA 2020+ sources, what is the alternative to DMC_C_WL_TABL_OP for restricting source access?

Access restriction for the ABAP source moved between two tables across support packages. Which table, which SP?

After upgrade, both IUUC_TAB_ALLOWED and DMC_C_WL_TABL_OP have entries. Which one does the system honor?

Through what channel does SLT access ABAP source systems, and what does that imply for securing them?

If any system in the SLT landscape sits in or touches a public network, what protection does SAP call out?

When configuring RFC access to an ABAP source in SM59, what connection type do you create, and what must you avoid even on a single system?

For the managed HANA connection, what connection setup work is required from you versus the not-managed case?

Which four actions can you configure per RFC user and table in DMC_C_WL_TABL_OP?

From which SAP Data Intelligence Cloud release can you use an SNC RFC directly in connection management, and what caveat remains?

What does authorization object S_DMIS control, and what are its three fields?

The DHCDCSBTYP field restricts by subscriber type. What kinds of subscribers can it name?

When is authorization object S_DMIS_MOM the one you need?

Connecting SAP Data Intelligence Cloud to an on-premise SLT, if you activate SNC while creating the cloud connector connection, what don't you need to do?