Announcement:
wanna exchange links? contact me at sapchatroom@gmail.com.
Posted by
Admin at
Question from kerry on Nov 4 at 9:03 AM In a recent audit, Internal Audit noted that BASIS has access to migrate changes into production, and also has developer keys along with the ability to change programs using SE37/SE38 within the development environment. We know that BASIS is normally assigned the task of moving transports to production and also needs SE37/SE38 within the development environment to apply OSS notes. I am not sure what reasonable, minimally intrusive controls I can put in place as BASIS has unlimited access in development at the SAP, OS and Oracle DB levels and can easily circumvent/compromise controls/logs, etc. Has anyone put reasonable controls in place?
| Reply to this email to post your response. __.____._ |   _.____.__ |
