Explanation
Assertion tickets are used for system-to-system communication in SAP systems. They are based on the SAML (Security Assertion Markup Language) standard and contain information about the identity and attributes of a user or a system. Assertion tickets can be used to establish trust relationships between systems and enable single sign-on scenarios. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_

Explanation
To enable access between tenant databases in an SAP HANA system for multitenant database containers, you need to do these steps: activate the cross-tenant database communication parameter in the global.ini file, add the bi-directional communication channel to the allow list parameter in the global.ini file, and grant the user in the source system the required privileges in the target database using a remote source object. References:
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/20d5f6af75191014b47cf39247
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/20d5f6af75191014b47cf39247

Explanation
These are some of the steps that you have to run on the managed systems to prepare for running the SAP Security Optimization Self-service on a customer system. The SAP Security Optimization Self-service is a service that allows you to perform security checks on your SAP systems using predefined questionnaires and automated analysis tools. The service requires specific authorizations on the managed systems, such as RFC authorizations or Security Audit Log authorizations, which you have to configure using PFCG transaction or RZ10 transaction respectively. The service also requires the ST-A/PI plug-in on the managed systems, which is a plug-in that provides various functions and tools for service delivery, such as data collection or remote analysis. References: https://support.sap.com/en/security/security-optimization-services.html
https://support.sap.com/en/security/security-optimization-services.html

Explanation
SAP HANA stores the values for the default Password Policy parameter in two configuration files: global.ini and indexserver.ini. The global.ini file contains the global settings that apply to all services and tenants in a multitenant database system. The indexserver.ini file contains the settings that apply to a specific tenant database or a single-container system. References:
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/fafcbcf9d9101014b3d9a08ce33
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/fafcbcf9d9101014b3d9a08ce33

Explanation
These are some of the ways that security relevant objects are related in the Cloud Foundry. Cloud Foundry is a platform-as-a-service (PaaS) that enables developers to deploy and run cloud-native applications using various services and frameworks. Cloud Foundry uses different security relevant objects to manage user access and authorization, such as role collections, roles, role templates, and scopes. Role collections are groups of roles that can be assigned to users or groups. Roles are sets of permissions that define what actions users can perform on resources or services. Role templates are predefined roles that can be reused for different role collections or services. Scopes are strings that represent specific permissions or attributes of a user or service.
References:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298