3722770 - Change Audit Log showing SAP system users making changes

• Audit log changes were made by system users in the SAP SuccessFactors environment.
• Confirmation was requested to verify if the changes were made directly by SAP via updates/patches.
• Customer wants to know what was changed by these users

SAP SuccessFactors HCM Suite

1. Run a Change Audit
2. Download the report
3. See that there appears to be SAP System users appearing in the audit that made changes to the system such as V4admin, autoprov, and technical users such as TECHNICAL_USER_UIC_INTEGRATION_5AFA2225 or TECHNICAL_USER_IPS2BIZX_F6E079C0 (please note that there could be other kinds of technical users often appearing in TECHNICAL_USER prefix format).

1. The users v4admin, TECHNICAL_USER_UIC_INTEGRATION_5AFA2225, and autoprov are system users utilized by SAP SuccessFactors to execute updates / patches and changes within the instance.
2. These system users do not alter any data within the instance.
3. The TECHNICAL_USER_UIC_INTEGRATION_5AFA2225 user is associated with SAP-managed system integrations, specifically related to the User Integration Center (UIC) or similar background processes in SAP SuccessFactors.
4. The user autoprov is linked to internal system calls that update Platform Features to enable Business AI.

• Refer to: SAP Note 2500964 - Do not use V4admin as User - System System
• Refer to: SAP Knowledge Base Article 3565643 - Technical User Shown in Change Audit

audit log, sap successfactors, system users, v4admin, technical_user_uic_integration, change audit, updates, patches, user integration center, business ai, platform feature, sap-managed integrations, autoprov, technical user , KBA , LOD-SF-PLT-CHA , Change Audit , Problem