topic Re: Issue in SAP security upgrade process in Application Development and Automation Discussions

Issue in SAP security upgrade process

Former Member — Wed, 15 Jun 2011 10:29:18 GMT

Dear Experts,

During the process of security upgrade,

After listing the roles and transactions that are effected

1. should we work on the basis and security roles first ? if not which roles will be addressed first.

2. should we make changes to basis and security users first or any other users?

Regards

Suneetha

Re: Issue in SAP security upgrade process

Former Member — Wed, 15 Jun 2011 10:32:03 GMT

If we dont fix our problems we cant fix others problems,isnt it? so first get the Basis and Security authorization right and then fix the others

Re: Issue in SAP security upgrade process

Former Member — Wed, 15 Jun 2011 13:27:55 GMT

Hi Suneetha,

Which version is your system getting upgraded to ? Usually from 4.7 --> ECC 6.0 the no of security/basis changes from a roles standpoint is minimal...we hardly found any new tcodes/auth objects that got introduced from a security standpoint...

So the good thing is your old roles still hold good and can be used to fix other objects/tcodes.

If its a 4.0 --> ECC then we do have changes and the approach is to get security roles fixed first and move on to Basis (Although they are given SAP_ALL during upgrade in Dev boxes) and then take up functional roles during DEV upgrade.

Hope it helps.

~Sri

Re: Issue in SAP security upgrade process

Former Member — Mon, 15 Aug 2011 11:08:15 GMT

Keep an eye out for S_RFC_ADM - this is a new object in ECC6.