Question:
Where can I find out who holds a developer key in SAP? I was led to believe we didn't have any but a recent audit has shown up 3 in the system but I can't seem to identify them
Can anyone help?
Answer:
They are in the table DEVACCESS. There is no standard transaction or way to remove them, but you should do so in PROD!
SAP will tell you to write a little program, but there are easier ways.
Ned
Answer:
Ned,
Although you can remove them, I have been told not to do so. Since they are linked into other tables in the workbench, and also some SAP tables for tracking of custom development. Is this true?
_________________
"SOX.. hmm .. Aren't they the baseball teams in Boston and Chicago?"
Kind Regards,
IamEvilHomer
(Wayne)
Answer:
No it id not true. The only reference to the table is to see if you have a developer key to change SAP code or Create an ABAP via SE37, SE38 and the like. USMM info will tell SAP if you have developer ids which are VERY expensive with respect to your liscense.... DELETE them.
Answer:
SAP does not have an authorization concept for developers. You have to trust them...
In prod, removing the developer keys is a BIG security move. In DEV, it is a different story because you can jump the wall.
Ned
Answer:
SAP will tell you to write a little program, but there are easier ways.
Ned
How many?
In prod, removing the developer keys is a BIG security move. In DEV, it is a different story because you can jump the wall.
Ned
Not necessarily. You should state your assumptions if you make such a claim!
Have fun,
Marc
Answer:
How many...: It depends on your risk profile and dependency on the system(s) and your network setup. Not to mention compensating controls and indispensable monitoring activities. Design is also indispensable, but you are also subject to the limitations which the software enables.
Ultimately, it is a trade off between complexity management and dependency.
Ned