Daniel Berlin on Security Insight on SAP security, development stuff… and all the rest

14Apr 12

Remove developer keys from productive systems

Dear reader,
a check, many auditors perform on your productive SAP systems is whether any developer keys exist (in table DEVACCESS). If there are any, this might become a finding you can easily avoid (… although your system is properly protected against changes in SCC4 and SE03 :roll:).

To delete all entries from DEVACCESS on production without touching the development system (and make your developers as well as the auditors happy)…

  • Launch SE14
  • Enter object name "DEVACCESS"

  • Select "Delete data", then click "Activate and adjust database"

  • Confirm

  • Mission accomplished

Note: This changes the activation log (go to SE11, choose DEVACCESS and click Utilities » Activation Log).

Comments (0) Trackbacks (0)

No comments yet... you could be the first!




Leave a comment


No trackbacks yet.