Question:
Is there a way to have SAP notify me (as the Security Manager) via either email, pager, or phone of any of the following actions:
A certain users authorizations get modified
A certain user modifies anyone's authorizations
A certain authorization profile (SAP_ALL) is ever granted or removed.
Anyones thoughts or assistance would be appreciated.
Answer:
Yes it can, you will have to code the exits to send what you like via SAPOffice of SAPConnect or othe utilities available in SAP.
Answer:
how abt enable table logging for tstca?
Answer:
Knowing that there have been changes is just one half of the coin.
If as security manager you have accountability in respect of authorisation changes, I believe you ought also to have responsibility for approving them.
So, if you don't sign all authorisation change requests (or keep copies thereof) how will you know that the changes reported to you are authorised or not ?
And its another step to know if they are correct or not.
Answer:
Why would you care about table loggin on TSTCA, a minor table in SAP security that is often overlooked as it has little use., it is a redundant check to S_TCODE and can only be changed in production with a transport from Development.