In the ever-evolving world of SAP, it is indispensable to update Security and Authorizations as per Standard and Latest Controls.
Upgrade | Migration | Conversion collectively known SAP Landscape Maintenance are the Core Project Transitions in SAP.
It is significant for a Security Consultant to understand | distinguish the above.
In this blog, I will present a crisp knowledge on Upgrade | Migration | Conversion and discuss how does it impact SAP Authorizations and when
Security Upgrade should be performed.
What is SAP SECURITY UPGRADE?
SAP introduces New | Updated authorizations (Transaction Code | Authorization Object | Authorization Field | Authorization Check Indicator) to SAP Tables – USOBT | USOBX during Core Component Upgrade.
SU25 – Security Upgrade Tool will be used to update the authorizations to Customer Tables – USOBT_C | USOBX_C. Impact of Security Upgrade will be reflecting in roles post execution of Upgrade Steps – 2A, 2B, 2D and 2C.
Note : As of Dec 2023, customer can Upgrade | Convert to SAP S/4HANA 2020 & above versions (Reference SAP Note: 3338941)
- CONVERSION : Customer who is in SAP ERP Central Component (ECC) getting CONVERTED to Latest SAP S/4HANA version
SAP Conversion
- UPGRADE : Customer who is already in SAP S/4HANA getting UPGRADED to Latest SAP S/4HANA version
SAP Upgrade
- Database Migration : This can be categorized into three approaches, and it accords only to Database.
- Lift & Shift : Homogeneous Migration of SAP Database without changing the Database type in source and target host.
- Export & Import : Migrating Database from one host to another host where source and target host may or may not have same Database type.
- Database Migration Option : Popularly known as DMO, is an option in Software Update Manager (SUM) to move the data from Non-HANA Database to HANA Database. SUM meanwhile offers Homogeneous DMO for SAP HANA to SAP HANA Migration.
SAP Migration
SUMMARY :
- It is fundamental to perform Security Upgrade for Conversion and Upgrade scenarios as there is change | upgrade in SAP ABAP Component Version.
- When Software Provisioning Manager (SWPM) is used for Homogeneous and Heterogenous Database Migration - Security Upgrade is not required as there is no change in SAP ABAP Component Version.
- When Software Update Manager (SUM) is used for Database Migration combined with Upgrade or Conversion - Security Upgrade is required as there will be change in SAP ABAP Component Version.