Monitor transactions executed by users without using SPM

[Former Member]

Hi,

We are trying to find out the way of monitor / identify transactions executed by users without using SPM.

In detail, there are business users who have access to certain transactions and we would like to identify such transaction usage by such users.

How can we accomplish such objective?

Many thanks in advance. Best regards,

Imanol

[Former Member · Accepted solution]

Hi,

Varun, Frank nice to hear from you two.

What I am looking for is the use of RAR and alerts as Franks states. We would like to be noticed when certain users execute certain transactions they have in their assigned roles.

The thing is that I read a presentation from SAP where it was saying that:

1. Alerts should not be an ongoing process.

2. They are meant to assist in prioritization during remediation and not meant to be part of the ongoing controls.

What do you think about this?

Many thanks in advance. Best regards,

Imanol

[Former Member · Accepted solution]

Hi Imanol

If you are planning to use alerts , then only highly sensitive actions should be defined as critical actions and alert enabled for them. This way alerts will help in identifying those actions like user/ purpose etc and can be used for re mediating the access from the user. this will make alerts more than a simple control that some one watching all the critical activities of a user

Regards

Sahad

[Former Member]

So, JUST create alerts in RAR for the most critical actions, right?

Thanks for all.

[Former Member]

Yes. Alerts are more meaningful when you do like that.

[koehntopp]

Hi Imanol,

there are many ways to do that.

You can look directly at STAD data (I think transaction ST03N does similar stuff?), or you can define it as critical access in RAR and use alerts to be notified when someone accesses that.

SUIM will help you identify users with access to a certain transaction.

Frank.

[Former Member]

Hello Imanol,

Look at STAD for the transactions executed. STAD is the place from where SPM picks up information about transaction usage. You can execute transaction STAD, provide information about the User, date, time & client and system should show you the details of the transactions executed by the user.

Regards, Varun