SAP ECC EHP 4 to EHP 7 Upgrade

[Former Member]

Hi Experts,

Currently my client is using ECC 6.0 EHP 4 . And now they are planning to upgrade EHP 4 to EHP 7.

Could you please advice what will be the impact from Security front and what things we have to take care care of.

I am unable to find appropriate documents/discussions that will tell me if it has any impact on SAP Security infrastructure.

Kind Regards,

Krishna Mohan.

[Former Member]

Hi Krishna

not a common question I would say.

I don't see any impacts on that side because all ecc6 are based anyway on netweaver 2004s technology in facts what you mention is an application upgrade

If you want to familiarize with these concepts, read this:

Hope this helps

a

[martin_voros]

Hi,

the first thing that comes to mind is that you will have to update your roles. There are many new authorization objects and checks in ECC 6.0 comparing to 4.7. So you will have to amend your roles accordingly using standard transaction SU25. The will be probably the biggest task and you can't avoid it. 

The newer version provides some additional methods for securing SAP system (e.g. securing RFC connections). The easiest way is to go through SAP security guide mentioned by Andrea. There is also a separate document about hardening ABAP AS. That's a good document as well.

Cheers

[Former Member]

Hi Krish,

Did you manage to get sufficient information on your query ? I am also currently trying to get some insight on EHP5 to EHP7 upgrade from security perspective !

Thanks,

Shingley

[Former Member]

Hi Shingley

I still stay on my answer made ages ago

But in case you want to read something, follow this:

Good luck

a