Symptom
During an upgrade of a system, after SUM upgrade-post processing the following message is shown:
"Maintain Switchable Authorization Checks"
SUM-Phase: MAIN_POSTPROC/REQ_SACF_COMPARE
Maintaining switchable authorization checks is important for the security of your system landscape.
Run transaction SACF_COMPARE to take over authorization scenarios that are relevant for your business processes.
Is this step to run SACF_COMPARE mandatory after SPS/release upgrade (ECC/S4)?
The following questions will be addressed in this document:
1. Is this step is mandatory to be executed after every SPS upgrade
2. What exactly we should compare in SACF_COMPARE and how to identify what exactly needs to be changed ?
3. Is this needed to be executed across all landscape (DEV, TEST ,Quality, PROD)
4. What changes SACF_COMPARE makes in system , does this cause any issue?
5. What will happen if we miss to run SACF_COMPARE after upgrade?
6. Which team ideally should perform SACF_COMPARE (Security/BASIS/ABAP/Functional team)
Read more...
Environment
ABAP Platform
Product
Keywords
SACF, SACF_COMPARE, scenarios , KBA , BC-SEC-AUT-SWF , Switchable Authorization Check Scenarios , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.