SAP Knowledge Base Article - Preview

3365925 - FAQ: SACF_COMPARE after SPS and/or release upgrade (ECC/S4)

Symptom

During an upgrade of a system, after SUM upgrade-post processing the following message is shown:

"Maintain Switchable Authorization Checks"

SUM-Phase: MAIN_POSTPROC/REQ_SACF_COMPARE

Maintaining switchable authorization checks is important for the security of your system landscape. 
Run transaction SACF_COMPARE to take over authorization scenarios that are relevant for your business processes.

Is this step to run SACF_COMPARE mandatory after SPS/release upgrade (ECC/S4)?

The following questions will be addressed in this document:
1. Is this step is mandatory to be executed after every SPS upgrade 
2. What exactly we should compare in SACF_COMPARE and how to identify what exactly needs to be changed ?
3. Is this needed to be executed across all landscape (DEV, TEST ,Quality, PROD)
4. What changes SACF_COMPARE makes in system , does this cause any issue?
5. What will happen if we miss to run SACF_COMPARE after upgrade?
6. Which team ideally should perform SACF_COMPARE (Security/BASIS/ABAP/Functional team)


Read more...

Environment

ABAP Platform

Product

ABAP platform all versions ; SAP S/4HANA all versions

Keywords

SACF, SACF_COMPARE, scenarios , KBA , BC-SEC-AUT-SWF , Switchable Authorization Check Scenarios , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.