The SAP S/4HANA solution line of SAP UI data protection masking and logging continues to evolve with the latest Feature Package 03 - available for the product version "2011" and running on SAP S/4HANA 1909 SP1 or newer.
Data masking and blocking
In the data masking/blocking area, the solution has been enhanced with several new features and extended coverage. Key innovations are:
- Extension of Data Blocking capability to Web Dynpro ABAP and Web Client UI applications.
“Data Blocking” has been previously provided for SAP GUI and UI5/Fiori based scenarios. The feature enables the system to suppress (not show) lines in table-style UI elements and block access to entire sensitive records in applications. This is useful in protecting highly sensitive data when the presence of a record should be hidden entirely in an application.
- "Multilevel data blocking" capability:
Multilevel data blocking extends input-based data blocking with enhanced configurability options which make attributes addressable from a wider range of screens in the targeted application.
- Masking capabilities for Embedded analytics:
Extending the technical coverage of the solution, this feature pack allows to mask data in embedded analytics scenarios in SAP S/4HANA, including analytical SAP Fiori apps, data grid scenarios in Web Dynpro ABAP, and analytical transactions such as RSRT in SAP GUI. Masking scenarios are already also supported in SAP Analytics Cloud for scenarios with live data connection to SAP S/4HANA. These features currently allow for role-based access control (RBAC) at this time.
Data access logging
In the data access logging area, the feature package provides an overhauled, state-of-the art architecture leveraging native features from S/4HANA.
- Streamlined UI Logging, optimized for SAP HANA:
has a tighter focus on the needs of analysis key users, e.g. data protection officers, with powerful new search and filter options. It also strongly improves handling of high volumes of log data, streamlines the solution's key processes (hence the feature's name), and reduces configuration effort considerably.
- Logging of attribute related UI content:
This option allows you to configure Streamlined UI Logging so that it logs and stores only parameters related to key fields and configurable "critical" fields (the so-called attributes), based on which analysis users can search better also for related user activities. Moreover, this option also greatly decreases log volumes.
- Improved log transfer to SAP Enterprise Threat Detection:
The new feature pack introduces Kernel API based log transfer to SAP Enterprise Threat Detection in real time, allowing an ETD installation to alert immediately in case of suspicious and potentially harmful data access and user activities.
