Issue in SAP security upgrade process

[Former Member]

Dear Experts,

During the process of security upgrade,

After listing the roles and transactions that are effected

1. should we work on the basis and security roles first ? if not which roles will be addressed first.

2. should we make changes to basis and security users first or any other users?

Regards

Suneetha

[Former Member]

If we dont fix our problems we cant fix others problems,isnt it? so first get the Basis and Security authorization right and then fix the others

[Former Member]

Hi Suneetha,

Which version is your system getting upgraded to ? Usually from 4.7 --> ECC 6.0 the no of security/basis changes from a roles standpoint is minimal...we hardly found any new tcodes/auth objects that got introduced from a security standpoint...

So the good thing is your old roles still hold good and can be used to fix other objects/tcodes.

If its a 4.0 --> ECC then we do have changes and the approach is to get security roles fixed first and move on to Basis (Although they are given SAP_ALL during upgrade in Dev boxes) and then take up functional roles during DEV upgrade.

Hope it helps.

~Sri

[former_member274841]

Keep an eye out for S_RFC_ADM - this is a new object in ECC6.