audit check : debug mode change of z-table field value

[Former Member]

Hi Experts

So sorry , cannot find a forum to post this information security question.

I like to find out how to know which ID has used debug ( /h ) to change z-table field values.

Does SAP support this requirement and if so how to get this information and how to enable this feature.

We need to audit such activities.

Thanks!

regards

Bass

[Former Member]

Bass,

Yes, SAP offers the capability to track such changes.  Consult your Authorization group and Basis team.

However, it is an uncommon requirement to track 'debug' type changes, since in most auditable systems, the 'change' capability has been removed from all standard roles and userids.  Auditors generally don't permit regular users to have this functionality.  If you need to know who has this, just ask your authorization group which userids have this 'debug-with-change' capability.  I would suggest that it probably should be removed in the productive clients.

Best regards,

DB49

[former_member184701]

dear,

you would run SU01 (or SU3) and go to Parameters tab

looking for some relevant IDs:

please contact your sap security team

regards,

P.S. you would also look at this document:

http://scn.sap.com/docs/DOC-27887