Monday, March 2, 2009

Is it Safe To End Date Some Applications Users like GUEST ?

The following 10 users are generated by the Oracle applications

GUEST
IBEGUEST
IBE_ADMIN
IEXADMIN
IRC_EMP_GUEST
IRC_EXT_GUEST
OP_CUST_CARE_ADMIN
OP_SYSADMIN
ASGADM
MOBILEADMIN

Is it safe to assign end dates to these users (if you are under a condition as not to remove them)?
In particular many are concerned with ASGADM and MOBILEADMIN as these have access to the responsibility System Administrator.

You may end date somes users and must not do it for some others like GUEST.

To get an in depth understanding, you can the review the chapter AUTHENTICATION ( page 23 ) of the white paper "Best Practices for Securing Oracle E-Business Suite" from Metalink Note 189367.1 .
It shows the users which can be end dated and the users which must not be , depending on the Applications you are using.

No comments: