CU62 - No authorization to delete change documents

[Mark17]

Hi,

in CU62, variant configuration, we want to delete a table, but thereforce authorization check is requiring:

S_SCD0 and S_SCD_OBJ with ACTVT 06 (delete)

As I know change douments never should be deleted in any application, right?
I doubt it is correct to grant this authorization for deleting...

Does anybody know why this seems required when trying to delete table in CU62?
For example if user are getting deleted (SU01), change documents will be still existing.

Thank you.

[Lakshmipathi · Accepted solution]

Yes you are right. Change documents are audit relevant and they are used for compliance and traceability. Deleting them can violate audit policies. SAP recommends to archive instead of deleting.

What the other alternative you have is to archive the table instead of deleting it. Restrict delete access to a technical user. Use a custom role that allows table deletion but not change document deletion

SAP’s own documentation confirms this behavior: deletion of planned changes or change documents requires authorization checks, and they caution against granting this unless legally permitted. You can read more on  this SAP Help documentation.