It is not possible to create or modify SAP accounts with the following name in SAP:
“sap*"
"sapcpic"
"sapjsf"
"ddic"
"j2ee_admin"
"j2ee_guest"
"sladpiuser"
"slddsuser"
"adsuser"
"ads_agent"
"tmsadm"
"earlywatch"
The names are "hardcoded" and protect the One IM user from locking himself out of his SAP - system (e.g. deletion of all users due to an operator error).
If such users are to be changed or non-existent ones created, this must always be done in the SAP GUI itself.
This list should be added to the documentation.
Related error messages should be adjusted.
This is a product defect (35695).
WORKAROUND:
None.
STATUS:
This will be fixed in a future release of the product. If you require this immediately corrected, please contact support for a hotfix referencing the defect ID 35695.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center