SAP Authorizations Custom Permissions

Direkt zum Seiteninhalt
Custom Permissions
User & Authorization Management with SIVIS as a Service
Versions are the change documents within the development environment, for example, for changes to ABAP source code or the technical properties of tables. This authorization should only be assigned to an emergency user.

If you want to set the table logger check for multiple tables, you should note that the principles for changing Dictionary objects apply, i.e. you will generate increased system loads in running systems. Therefore, you should make both the modification and the transport of the changes outside of business hours. The SAP system only provides customising tables for table logging by default; so you don't have to worry about performance. Tables that serve to customise typically contain relatively little data that is rarely changed. However, you should not turn on table logging for tables that are subject to mass changes, as there may be performance and disk space issues. This applies to tables with root or movement data. After all, if table logging is enabled, a log entry in the DBTABLOG table is generated for each change to the contents of a logged table.
Encrypt e-mails
In many SAP environments, there are historically grown authorization structures that cause unnecessary security gaps. These should be examined closely.

SAP_NEW represents a specific permission profile that summarises the concrete permission changes between two SAP release levels. A distinction should be made between SAP's delivery of the SAP_NEW profile and the generation of an SAP_NEW role with a corresponding profile by you as a SAP customer (see also the SAP hint 1711620). Depending on the authorisation tracking procedure, the SAP_NEW permission can be assigned to any user in a development and quality assurance system immediately after the technical system upgrade. However, the goal is to assign to each user in the production environment only permissions that they need for their business operations. In the context of upgrades, the correct permissions must be determined and integrated into the corresponding permission roles.

"Shortcut for SAP systems" is a tool that enables the assignment of authorizations even if the IdM system fails.

The website www.sap-corner.de offers many useful information about SAP basis.


In workshops with your departments, we create concepts to assign the required rights to employees.

To store all the information on the subject of SAP - and others - in a knowledge database, Scribble Papers is suitable.


Unlike the authorization trace, a system trace is mainly designed for short periods of time.
Zurück zum Seiteninhalt